Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer (raw, json)
Hash identifier: lOfuraF2hggG954a7lW9f9wFVQW9yW0o3p+kZ6ask2E=
Subject key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:56:34 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 142030
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171075 (0x29c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:56:34 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:f5:4f:b1:ce:e7:15:1b:82:cd:ca:3a:c8:
a2:ac:ad:7c:b4:92:5b:74:4f:f5:df:11:67:d7:e9:
30:7d:d6:12:40:1e:90:a6:92:01:ec:6f:ec:92:ca:
7c:c4:74:8e:b7:c1:39:97:8f:18:15:16:69:ee:be:
03:36:22:d2:9b:9c:ce:5b:cc:f3:a3:c0:cf:27:92:
51:a9:3e:01:4c:02:bc:16:b1:08:59:a6:ea:52:c7:
a2:bd:c9:14:f5:80:78:e0:b5:90:b7:b2:04:f8:76:
7e:5d:ce:79:2d:60:b5:7f:3c:d1:78:dc:23:8a:a3:
c6:f9:db:d5:59:44:ca:d7:b3:96:a3:89:b6:e3:de:
49:eb:c4:82:bf:be:2f:db:9b:19:fd:1d:8f:e9:54:
87:26:3a:48:bd:e4:c5:e8:60:7f:df:14:7c:6d:00:
b5:0c:46:3e:91:5f:15:c0:d8:ca:f9:4a:ac:8e:ce:
e8:73:fd:53:60:c9:08:3b:e0:ca:0b:83:fb:7a:bf:
27:6f:06:c6:e6:0e:2a:40:69:8b:cd:6f:03:91:d0:
5c:e1:f0:2e:28:08:b3:ad:7d:42:94:71:fa:cc:5b:
b4:9b:0b:fb:bb:a3:a8:eb:b4:1d:ed:3f:36:66:07:
0d:8b:22:5b:a2:a2:77:ba:53:c3:39:29:24:03:2b:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142030
Signature Algorithm: sha256WithRSAEncryption
bf:86:97:00:e2:87:ca:07:92:e2:be:3c:5c:fc:e2:1c:65:50:
d2:eb:fe:09:c0:3a:4f:17:bf:18:8f:0d:6c:25:ad:bc:15:ac:
67:67:cb:97:64:cf:bd:e4:95:7c:12:c9:70:3d:17:9a:a6:95:
df:76:52:c9:30:2e:24:6d:bd:56:5b:32:77:55:4a:18:ea:a2:
5d:89:02:5e:e2:fa:b7:b1:f1:98:31:aa:1e:3f:f5:f8:ef:83:
18:0c:1d:5f:69:aa:c4:cb:f6:02:04:d7:82:5a:f8:38:8c:f9:
04:dd:0f:82:36:42:2b:cc:dc:b5:e3:e0:76:66:45:ec:c6:32:
01:c9:22:30:f9:cc:3c:39:e6:90:29:9c:95:34:4f:4b:ab:4b:
94:53:68:06:9a:f0:10:85:ff:d0:99:b6:11:ee:49:2a:5b:c7:
8e:94:aa:1b:61:f3:98:99:40:4f:1b:f6:b7:93:2c:1e:f5:5b:
78:69:d8:51:38:6c:61:e7:61:82:b8:84:57:24:5c:f2:d2:5b:
31:03:63:cd:e4:c6:c0:56:93:39:3c:96:af:1c:d7:49:39:16:
5c:a7:26:20:e9:5e:57:c1:56:9e:06:81:32:b0:ed:cf:c8:da:
1a:7b:00:57:df:18:3d:02:48:be:70:45:3d:e7:a6:1e:bf:c2:
8e:fd:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:55 2026 by rpki-client