Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
File: FFdMbIw3bumzwcilrbdcuMJo_6o.cer (raw, json)
Hash identifier: mR+lIgTq9vUGMtUPW5D5v3vQmj03Qje3DtVyOgYe5j4=
Subject key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CFB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Aug 2026 08:05:50 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 140910
IP: 103.153.90.0/23
IP: 2001:df6:cbc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 20:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184241 (0x2cfb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 25 08:05:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:37:87:47:6e:57:21:90:e2:8b:fd:9c:6d:
43:64:07:4e:44:3d:dd:8f:be:08:26:5a:74:00:ec:
fe:b4:4f:f4:39:b9:4b:7a:72:eb:c1:81:0c:a8:a7:
1f:1e:2d:4f:2b:7b:00:5b:c3:1d:d1:d2:95:b6:17:
d5:f7:7f:fb:23:5a:3d:9d:ee:3d:e5:e3:95:ba:81:
20:a3:5f:90:5c:e3:29:88:53:40:0e:26:d5:f6:92:
62:58:28:df:55:e4:e8:98:d3:43:7b:3f:0b:f3:a0:
dc:d4:71:02:82:92:2a:93:a3:7a:78:4f:83:de:0e:
69:f2:75:b3:4c:c2:a3:66:28:8a:7c:64:f0:c3:5e:
a0:30:c5:e3:79:1f:0e:3b:4a:6e:f9:d5:f6:54:a3:
af:30:41:b5:58:18:c9:9f:9c:3a:3c:f5:d3:c9:30:
82:fa:fc:d8:da:f1:b0:17:48:27:04:bd:65:08:1c:
22:cb:0f:63:b3:1d:b2:cb:43:92:77:28:fb:68:08:
f4:9b:7a:87:44:cb:0d:01:9c:c3:5e:6c:ec:10:81:
a3:3a:21:b0:bf:59:d1:4d:07:e4:d9:fb:9a:4c:e0:
8b:21:7f:9e:29:b1:8f:f7:fd:fe:34:1f:04:15:64:
ce:bb:cf:63:f5:25:52:46:70:62:e6:82:ec:81:83:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140910
sbgp-ipAddrBlock: critical
IPv4:
103.153.90.0/23
IPv6:
2001:df6:cbc0::/48
Signature Algorithm: sha256WithRSAEncryption
ce:1a:8b:e8:23:b8:25:29:f7:c9:b4:1a:1e:37:54:d8:ff:56:
12:28:60:97:b0:bd:d9:1d:03:1b:e9:80:0c:ae:4b:6e:46:b1:
41:2d:ac:fe:59:44:60:7d:2e:96:83:c1:83:6e:ae:89:34:e6:
4a:59:b3:37:d1:95:39:b5:76:d0:12:7b:5a:b9:79:da:63:e8:
97:7c:51:b1:6d:c4:3c:b6:c9:ea:e3:dc:13:27:6a:fe:90:32:
49:fe:27:25:ac:d7:50:79:b6:44:25:37:10:37:8f:e1:41:40:
b5:34:3f:fc:6f:c1:20:69:66:17:5f:61:e5:1d:ea:19:12:a6:
bc:be:3e:26:4d:7b:29:d4:0e:85:e3:8c:1b:2d:de:69:3c:6b:
31:15:28:6d:df:ad:c3:cd:85:7e:e4:e5:eb:72:00:33:74:ef:
9c:53:10:65:fd:e2:f6:af:9a:22:b4:44:f7:18:d3:3b:ff:7f:
fa:fb:b6:ba:2f:69:00:99:04:41:c1:8d:73:32:19:e0:df:19:
44:2c:ba:e1:96:7f:df:10:0f:f3:a9:01:86:c7:4e:67:af:a8:
ee:19:a6:d8:1d:66:7c:31:98:5a:47:21:19:23:84:f2:03:13:
ec:fa:ee:3b:e0:54:92:00:fa:8e:25:4a:49:e9:4e:f7:48:70:
99:48:ea:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:25 2026 by rpki-client