Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer (raw, json)
Hash identifier: CMJKIr+7otjZ13hH/si0+lR4JIK+93doKnaUGyK2EZs=
Subject key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DEA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 Oct 2026 12:42:51 +0000
Certificate not after: Wed 01 Mar 2028 00:00:00 +0000
Subordinate resources: AS: 154376
IP: 2402:3a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 15:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188073 (0x2dea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 12:42:51 2026 GMT
Not After : Mar 1 00:00:00 2028 GMT
Subject: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:6d:53:ac:4a:2c:d0:1b:13:d4:d9:24:d4:
58:7d:15:f5:81:60:0f:96:6c:9b:8f:f7:65:f6:24:
e4:f9:3d:c6:76:d8:8f:88:a6:d5:c7:d7:b6:a1:af:
69:60:c9:1d:29:96:9e:a2:61:60:e5:f1:67:47:0e:
ea:00:62:74:9a:93:42:2d:2e:b4:1a:e0:1c:f4:a1:
c7:59:37:08:a2:40:3d:62:98:1d:fe:2e:ab:f5:ea:
ab:a6:dc:34:7a:d2:0f:93:5e:68:c3:d3:b1:f0:e9:
ae:39:48:54:ef:e6:7e:0a:39:de:c2:59:d4:0f:63:
c1:e2:82:c7:9e:c5:a5:66:e9:00:d4:a6:2a:e3:fa:
d5:a0:7a:e3:29:5b:66:56:c6:87:a1:ad:a6:44:65:
51:3b:e0:c9:51:11:cc:17:7b:9e:e2:82:39:65:5f:
ef:06:85:4d:f6:0e:8f:c8:ce:17:b1:59:e7:c7:fd:
78:0a:2f:80:3d:57:7a:33:e3:9c:34:c7:f7:95:9d:
94:5d:60:a2:36:4f:5c:94:fd:d8:64:8f:be:d9:3f:
d8:25:8e:b3:13:df:4a:c2:a1:8e:3a:48:3e:ea:83:
5b:26:83:90:90:1f:e3:d0:6d:5f:75:f8:76:1b:95:
f2:92:5a:c0:a3:b4:c3:d7:8e:4c:57:92:7b:03:9a:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154376
sbgp-ipAddrBlock: critical
IPv6:
2402:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
53:eb:71:79:bd:fa:71:4e:b2:3b:f4:ee:90:e1:fe:bf:b2:34:
c6:18:56:67:14:1c:cb:4d:ce:34:04:34:ed:2e:ea:dc:50:5e:
91:86:e4:97:4a:76:19:d4:9f:f7:a6:7b:34:be:12:8a:91:5b:
b6:ee:e5:12:16:43:9f:26:1f:ff:e4:25:9c:af:ce:29:da:e5:
49:ca:ab:3a:5b:32:1e:3d:ab:e1:a0:c3:15:fb:fe:b7:10:0a:
80:93:99:de:aa:0f:18:17:c0:f5:1e:02:3c:22:98:bc:da:20:
01:17:04:c4:30:86:5d:d0:c3:ad:da:20:ce:e7:70:49:86:76:
e7:c7:4c:ec:52:7f:dc:ed:9c:47:79:8f:8a:37:04:ee:8b:1c:
50:07:ff:0f:c2:d7:0d:93:ac:ad:63:b0:35:cc:27:21:ed:dd:
ca:2a:9c:f4:94:cb:4f:42:70:68:16:6e:0a:c1:b4:8b:13:e7:
ab:a0:13:cd:fc:4d:dc:84:fb:f1:fd:a7:1c:d0:8a:da:00:cf:
a0:f5:6a:7a:2e:f2:14:bc:85:9d:ab:d6:71:10:6a:7e:d8:ee:
dd:a3:83:f4:50:b6:50:0b:74:8f:28:00:ec:81:21:58:6f:b2:
ab:38:14:d4:3e:ff:b5:ae:a4:18:cc:cb:d8:ae:e7:9a:67:b0:
53:c6:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:01:33 2026 by rpki-client