Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQyS1B9lrCksDxiJGX-EuBjRneo.cer
File: EQyS1B9lrCksDxiJGX-EuBjRneo.cer (raw, json)
Hash identifier: crUVKpsPAryEyBNy0oI9HxXQ+71cSJohAIh1q24ilyY=
Subject key identifier: 11:0C:92:D4:1F:65:AC:29:2C:0F:18:89:19:7F:84:B8:18:D1:9D:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D65D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C14E0/D7EA8214B19D11F193364A5B7011F970/EQyS1B9lrCksDxiJGX-EuBjRneo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C14E0/D7EA8214B19D11F193364A5B7011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 07:11:35 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 134699
IP: 2001:df6:6400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185949 (0x2d65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 07:11:35 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91C14E0, serialNumber=110C92D41F65AC292C0F1889197F84B818D19DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:58:9d:fd:e8:2f:74:10:f3:ae:e1:a8:a5:
2b:c8:78:0f:a1:45:20:79:ea:fa:79:58:e5:36:64:
38:23:d5:ea:67:bb:d8:cc:1e:df:56:e0:b9:e0:17:
a1:9c:e7:a0:70:03:4a:a2:1b:53:40:d6:b6:75:fb:
72:ec:a4:ad:72:62:62:31:d0:46:d1:46:68:49:0f:
c6:c7:88:c2:a1:90:c4:a1:ef:78:ee:09:c9:d3:04:
79:bb:9c:df:f5:d2:55:8c:53:1e:78:fb:02:b1:ab:
a0:34:54:08:1f:de:41:b3:2e:1b:f0:78:5d:5d:16:
c6:35:2b:ad:eb:ec:7a:86:3c:46:ce:31:28:c2:3e:
be:f4:48:98:e4:2b:b8:64:e0:1a:be:48:f4:03:a6:
45:87:8c:b7:2a:22:e8:f8:37:9e:0d:53:4e:4d:d1:
28:7e:41:88:55:d7:c1:36:ee:a3:b5:11:ba:79:85:
6e:80:86:79:bd:d1:a9:17:c9:7f:a2:97:e6:3b:73:
c8:e9:25:17:eb:28:13:f3:bd:db:d6:5d:5e:d6:ce:
87:c1:d6:0b:b5:71:e3:46:c3:86:38:e6:f5:bd:fc:
29:0c:ee:c8:0d:ef:22:7b:ff:8a:5a:2d:92:5e:aa:
27:26:ec:9e:f7:ce:4a:3e:42:73:3b:df:68:0f:2f:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:92:D4:1F:65:AC:29:2C:0F:18:89:19:7F:84:B8:18:D1:9D:EA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C14E0/D7EA8214B19D11F193364A5B7011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C14E0/D7EA8214B19D11F193364A5B7011F970/EQyS1B9lrCksDxiJGX-EuBjRneo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134699
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:6400::/48
Signature Algorithm: sha256WithRSAEncryption
b1:bb:45:33:c6:fc:49:eb:dd:3d:60:ef:17:3a:c9:63:68:15:
ac:75:f5:60:c9:30:e7:dd:52:b0:df:9a:11:32:b2:b9:9f:6c:
35:ce:cb:da:c1:72:82:c5:51:36:05:cb:29:a2:87:bc:9b:db:
1e:0f:f7:f0:cd:8e:d9:db:8c:9a:ea:56:63:c9:64:c1:b7:59:
34:46:75:a1:69:be:c4:90:97:2b:c2:25:0a:6f:7c:b6:d7:71:
5e:d8:36:4e:d7:e0:95:be:af:c8:01:64:f0:e3:20:1b:fb:d6:
29:b6:71:74:da:2f:fd:4c:92:9c:5d:4b:53:44:89:42:d0:59:
af:d9:34:1a:33:18:24:5b:ca:cd:98:20:94:ec:07:28:b7:08:
5c:09:ea:88:5d:4c:d6:72:fa:e2:3c:02:ce:0b:ef:ba:d1:40:
37:90:ea:7f:b3:db:43:35:55:54:f9:8c:12:91:5c:a2:48:a6:
93:ae:a5:c2:02:7e:37:53:a1:e7:10:fd:76:a3:b9:aa:08:70:
b9:bf:93:f5:4b:1f:17:e5:e1:52:43:6d:b6:94:92:c4:4c:c4:
7c:16:be:0e:24:be:87:82:28:d1:18:bf:82:7e:0d:2f:78:d4:
e3:f3:3f:71:0e:d8:b4:af:d6:1a:6a:a2:a7:a0:e6:84:0e:7f:
a8:cc:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:58 2026 by rpki-client