Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer (raw, json)
Hash identifier: bLC6onSYYAtnK5IpT4iYZGjGsTXvOYOSrtAnRED2ayA=
Subject key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BB97
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 06 Jun 2026 14:25:47 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 138327
IP: 2001:df3:de40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179095 (0x2bb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 14:25:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:92:a3:13:1f:30:d7:7a:d1:ac:ff:f0:03:
55:72:3b:fc:b2:1c:1a:74:88:77:42:98:30:51:71:
b3:f8:ba:b7:74:fc:89:42:21:a2:e4:5d:37:cc:90:
fe:91:90:f4:8c:f4:7d:84:68:76:e5:24:47:ba:df:
a4:f0:31:cc:02:90:0c:41:17:29:8e:ad:fc:e4:c4:
70:73:22:be:e1:60:9f:20:c2:20:a1:fd:3c:29:81:
b5:e5:39:e4:28:c6:69:04:c0:0a:a7:5c:ca:8e:6b:
bc:fc:7d:43:e1:0f:49:2e:fc:06:cd:bd:b6:c1:f9:
1d:ad:16:3e:79:57:2b:12:3a:9e:bf:2b:f4:ba:ae:
c4:6f:e1:bc:b2:2f:38:d3:d2:0c:fc:fd:a7:b6:17:
74:04:5e:71:30:b3:82:71:5f:22:cc:60:97:ee:66:
70:d7:b5:cd:c1:a9:35:87:13:af:e0:35:4d:db:e5:
93:b1:3d:9d:df:70:ba:a2:36:42:38:9a:35:ce:db:
48:85:d3:d5:ff:01:71:99:1e:4d:1e:9b:35:58:c8:
43:69:47:cc:90:72:4c:45:b5:5e:03:0e:22:c3:7c:
bd:6f:eb:f8:54:26:a5:25:a8:b8:93:36:ca:c9:25:
f4:2e:68:46:6d:a2:98:01:ad:31:19:9e:c9:59:2a:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138327
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:de40::/48
Signature Algorithm: sha256WithRSAEncryption
cc:f3:59:33:06:dc:6c:b3:98:ca:c5:89:32:60:84:72:50:96:
d4:8f:2f:9d:78:39:5b:bd:ee:f8:ce:77:6e:98:41:31:b9:72:
3b:9d:4f:83:cc:2d:b2:89:33:05:d4:9e:c1:6f:6c:1e:65:b2:
f8:14:a7:54:49:c2:5e:6c:98:a7:83:d8:6a:5a:76:b3:0b:f1:
30:42:cf:3d:b9:10:d6:b1:7f:d6:2e:af:7e:50:92:c3:d1:53:
71:19:c4:1f:9d:55:bf:d6:cb:c2:48:de:aa:de:32:35:67:a2:
ad:ab:03:28:54:27:2c:cd:24:48:9c:1d:a6:eb:93:78:31:c5:
2a:88:45:9b:08:eb:69:b6:88:bf:e6:7d:9e:6d:60:61:bc:4e:
67:41:c8:20:7b:db:e9:3b:cc:74:2e:80:e3:90:63:2d:30:33:
60:62:c8:c8:c1:78:7a:be:67:f8:10:87:e4:a2:7f:a0:4c:ec:
ed:0d:48:b9:9b:35:6b:d2:ce:37:46:89:5b:b4:b1:bb:b9:02:
22:47:58:a4:10:62:2f:ce:9a:46:4a:33:3c:94:13:cd:0d:68:
a1:e5:1c:31:f0:ba:7d:53:da:22:14:49:a3:89:dc:bb:29:e2:
4f:36:6e:5b:b0:10:7e:85:a7:99:60:d2:f7:70:e3:41:35:2c:
4d:d5:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:03 2026 by rpki-client