Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
File: 6tKydVDbcXQNXPh2q1QLuGtfKjg.cer (raw, json)
Hash identifier: 6XWm+UDpxQPKuzOj6Q6IJ9BAtOvX+BdCWu5mpxeSsxU=
Subject key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0296AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:31:04 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153328
IP: 2001:df6:bdc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169647 (0x296af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:31:04 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:c6:2c:14:89:ec:ba:84:17:7d:d6:ab:9f:
88:1d:39:6c:4c:15:bc:ad:4c:1e:d3:60:ab:f0:ff:
26:7e:62:d7:f8:82:98:73:88:b1:9d:f7:4c:03:8b:
5c:3f:e5:1a:be:25:76:57:a2:26:9c:3c:12:12:1a:
52:a8:53:4e:89:1a:53:55:0b:e6:b6:42:39:d5:eb:
b4:80:7a:f7:b4:06:a7:ca:a7:02:24:1c:cf:bf:22:
d6:f9:a2:34:94:8c:ab:d2:50:70:50:e4:48:c9:dd:
0a:59:12:4a:0c:42:a2:1a:36:2b:6f:49:c3:bd:54:
cf:53:ab:b7:b3:10:ae:70:75:9b:19:36:12:7e:86:
b8:ed:cf:5d:3b:d0:d6:b3:71:e7:30:d3:f8:84:cb:
d7:84:e7:11:2f:0c:d7:5c:58:ef:c2:f0:49:17:4b:
79:ea:2e:de:85:dd:34:fb:5e:c8:e9:59:b2:d8:02:
42:99:17:84:d7:5f:3b:89:55:08:f8:df:21:17:3e:
c9:8d:51:e1:45:28:9c:5a:ed:1b:a7:a6:48:a7:0a:
b9:82:6c:68:34:78:63:6d:40:53:83:cb:ac:20:53:
40:8e:e5:a5:e5:67:1d:16:c9:7a:7b:fa:5f:67:01:
39:f3:f9:c5:5e:f2:19:3d:8f:53:6e:e8:c0:b9:27:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153328
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:bdc0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:80:bd:fd:9f:c6:dd:3d:8a:af:aa:11:c2:85:85:b6:a7:2a:
45:87:c7:e1:07:41:4d:8f:dd:fe:51:1a:c0:ff:6a:cd:39:41:
2b:7e:ee:b5:64:8b:1a:7b:51:e9:eb:04:3b:9c:af:b0:9d:e2:
59:fe:21:70:02:b7:23:94:47:b1:0c:ee:08:d2:78:40:96:71:
a9:4e:fb:45:93:e4:22:52:fb:fb:0b:6f:1c:b7:d2:79:da:c0:
0e:e2:7b:01:c2:bd:69:a5:cb:ce:63:4b:c0:5b:e4:d0:d2:38:
31:a2:7b:46:b9:59:d5:e4:62:c3:40:a8:9d:69:36:81:ec:ab:
32:20:01:36:e7:10:19:90:98:b8:68:97:6f:02:64:b4:20:6d:
2b:55:13:3b:9b:a8:e9:b7:5b:f3:df:d6:02:23:30:71:85:d7:
1f:50:ac:c9:cf:9c:a9:2f:4a:dd:61:57:d8:00:55:ee:cf:d3:
90:52:15:39:30:9d:44:9c:07:da:b9:80:9c:1d:98:05:db:f4:
b1:80:e3:ed:36:77:c5:35:0a:1e:33:a4:3f:85:08:8b:a8:44:
e7:4b:85:8f:2a:95:27:f2:9d:4d:3a:a3:d3:7d:49:bb:72:c7:
ed:35:05:62:71:17:7c:b1:de:1c:8b:87:b8:be:31:79:e0:70:
7e:bb:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:16 2026 by rpki-client