Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
File: F6gIZniOytzh9tCsYYLRDDnXf4k.cer (raw, json)
Hash identifier: uFL4ZSU+Rv1n+vahAiRWwL4yHoQCyysTsHmWIX6yiZA=
Subject key identifier: 17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D422
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 06 Sep 2026 07:28:22 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56278
IP: 45.126.244.0/22
IP: 103.29.32.0/22
IP: 2402:3dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185378 (0x2d422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 6 07:28:22 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A911BEC0, serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:6a:90:c7:fc:b9:d9:d8:48:db:e6:e1:b1:
e9:84:3b:0a:ca:0c:06:e8:13:8a:8c:e4:3b:9b:56:
e9:a8:98:4e:d3:82:e3:ef:7f:0f:5e:b7:d6:8f:ef:
3f:cc:b1:84:4e:ff:ea:20:b0:43:59:59:23:d0:44:
63:45:04:03:78:16:de:70:c4:22:6c:a3:e3:c2:5b:
b9:a5:88:6b:bd:aa:55:be:22:58:c8:d2:d3:f6:a7:
46:39:e1:30:90:33:2b:e9:9d:5d:f0:f5:2b:cc:6e:
3b:d2:8f:f0:39:26:b8:54:9b:17:da:37:6b:40:79:
b2:4b:d4:23:3f:05:62:8e:4e:71:58:64:4b:f2:f9:
bd:79:d0:43:08:c7:6b:9c:33:86:8f:b4:71:a2:8c:
ea:99:1c:4e:d6:55:98:b6:16:c3:e7:55:45:a7:ee:
47:a3:3e:b9:63:7b:76:40:7d:cc:25:3a:8c:65:ba:
7e:fb:d4:a0:15:e7:a8:70:9e:d0:e0:b4:5f:da:c1:
b7:a5:2d:15:d1:23:f7:35:9b:ee:7b:1b:22:8b:40:
85:1f:84:79:f9:4b:0e:21:bb:e4:36:a3:52:df:66:
27:e5:3d:a7:e8:2d:56:9d:81:bf:77:da:5d:f9:17:
42:fb:74:3a:db:36:ad:dd:8a:75:42:74:cd:50:f6:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56278
sbgp-ipAddrBlock: critical
IPv4:
45.126.244.0/22
103.29.32.0/22
IPv6:
2402:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:35:48:dc:2d:36:1d:a7:cc:b5:0b:f7:85:2c:eb:75:d0:7b:
1c:75:fe:53:22:87:f2:7e:19:fc:11:5c:08:fc:55:f1:e2:56:
0b:da:71:9f:55:58:85:ac:14:0c:11:5c:06:4a:5d:96:4e:47:
19:f1:19:d1:a0:85:28:3f:cb:5f:79:e8:4d:39:90:8f:8c:14:
4e:e5:d7:11:fb:8d:bf:a4:06:e0:fc:33:d0:40:32:c5:0e:0b:
38:e1:34:1c:5a:5f:14:d3:2d:3f:bb:3e:64:2d:78:a5:65:27:
44:ee:71:23:37:f6:c6:33:7b:2b:76:17:03:d0:c6:a3:5c:65:
c2:f5:f2:c2:12:f5:5a:c6:e6:9c:68:6c:ad:f2:39:c5:0c:b8:
06:66:f3:7d:31:e1:f4:68:06:cf:ab:1e:7f:67:99:d6:e3:7a:
03:52:7e:18:e3:18:6f:d6:16:c7:f1:9f:be:de:99:cc:0b:48:
71:26:06:c4:f5:6c:67:26:ea:3d:6a:b9:63:6c:1b:0b:c1:fe:
1e:25:79:f9:2f:1f:85:13:8a:d2:aa:b0:be:37:18:cc:42:84:
27:ec:79:d2:44:3f:86:5e:c1:8f:3c:37:3d:d3:3b:09:b1:83:
a1:25:d0:99:47:c7:3d:85:85:ba:54:ba:99:7c:7b:a4:b0:20:
2e:01:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:24 2026 by rpki-client