Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer (raw, json)
Hash identifier: MA4Dcl6ynPBWFtKmHY4hLY8ic+Z0rFzpsCWHDG9IewY=
Subject key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D689
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 13:23:55 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 23896
AS: 23939
AS: 45795
AS: 45817
IP: 202.79.176.0/21
IP: 2401:7800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185993 (0x2d689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 13:23:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:b9:90:07:0d:4f:14:2c:ae:0c:2f:3b:3e:
f4:21:ef:08:75:6c:b0:f4:b3:d4:30:a2:1f:4b:18:
3a:7a:ea:c8:64:0a:a3:fe:5d:b2:ff:fd:74:a1:0f:
2f:57:86:37:39:dd:cb:f4:ae:9b:11:28:4a:e7:9c:
22:60:18:fd:97:fb:74:38:be:22:4f:a8:90:39:5e:
74:d7:71:dc:46:cb:73:c7:8a:5e:be:f3:45:cc:ce:
f2:8c:94:07:fe:ab:69:52:b2:ea:d0:56:7d:ee:14:
72:14:65:30:45:4d:80:8a:b6:b2:5f:4b:2d:f4:f5:
fa:f1:ce:76:62:b7:e9:29:a3:2b:9d:33:ef:97:f6:
26:b0:79:cc:1f:17:5d:34:81:15:55:75:75:20:7c:
68:e7:6b:ba:44:45:a5:b1:b0:a6:58:b3:82:1e:36:
0d:5f:86:66:8c:58:c1:c8:4b:7f:71:5f:ff:27:0d:
02:0c:a0:b3:9f:62:d6:d6:07:1a:9b:6b:cb:88:80:
ff:b3:07:46:a1:7c:2c:6c:f5:6d:aa:5f:42:b5:b1:
4f:ac:bf:93:5f:35:65:72:f9:ab:64:71:54:59:b5:
80:1b:7e:4e:7e:46:9b:f1:09:e3:77:d1:6a:54:f4:
5f:3b:2d:24:11:c5:3d:52:bd:84:6d:b9:4f:db:67:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23896
23939
45795
45817
sbgp-ipAddrBlock: critical
IPv4:
202.79.176.0/21
IPv6:
2401:7800::/32
Signature Algorithm: sha256WithRSAEncryption
96:9d:b3:8c:96:8a:bb:a2:8d:f7:0b:65:28:55:de:4d:a9:1c:
1a:d3:23:86:c5:ab:55:37:1c:8b:17:ca:b1:af:61:7d:d5:c4:
69:b7:b2:2c:39:e5:ea:99:61:75:df:0c:bd:97:4f:f8:d7:f0:
5e:84:62:7f:4f:63:36:09:5d:50:52:ba:0f:a0:a4:13:55:94:
88:ca:c4:82:d2:57:4b:5f:8e:cc:85:30:05:1a:e5:71:be:7c:
1a:ad:de:5a:ef:c6:ab:55:ed:e1:7a:cb:ea:d9:56:c0:ae:cc:
bb:91:ef:2f:d1:a7:e4:e4:2a:2b:b3:22:2a:a5:a1:b2:d9:9d:
68:6f:4c:f6:ed:52:46:03:bb:ba:4e:b1:12:67:ca:ad:a7:45:
e8:85:84:0d:2e:b2:ae:00:6d:46:7d:18:14:80:77:8c:34:3d:
9d:36:f8:b4:35:b8:f6:97:fd:63:31:9a:13:85:bc:1c:52:32:
13:82:3a:84:13:e9:21:5e:03:f4:bd:db:25:05:86:34:63:b3:
20:1e:4d:94:0a:95:b2:54:27:9d:dd:14:3d:b2:ef:e7:ca:ac:
bd:83:84:e5:80:6f:55:fd:04:ae:7b:82:0d:3d:61:cd:31:fd:
8c:06:77:3d:9d:23:d6:d9:41:85:80:12:fb:86:de:73:88:ab:
e0:e9:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:24:01 2026 by rpki-client