Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
File: KncXIyWXseQO6_FQ58uUIvRdim0.cer (raw, json)
Hash identifier: WFu4ATuHnYQdflOva5MklQvMsgy2N76c/yj9UwO7Cqk=
Subject key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029BE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:54:52 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 142194
IP: 2001:df6:9440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170977 (0x29be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:54:52 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:8f:4a:08:6f:87:df:9b:db:14:b2:ed:aa:
2f:d8:9a:19:18:ea:3d:ea:a8:56:93:58:e4:84:96:
73:d8:ca:f6:0d:b4:c7:17:57:3f:a2:da:7c:a0:69:
a6:5d:b0:39:20:d4:0e:c2:24:24:de:a0:f4:80:2f:
45:5b:ab:c4:64:1f:2c:20:da:52:bf:af:04:43:ed:
3b:a5:15:a3:b8:f2:50:b5:ef:5c:d9:76:8e:27:71:
5d:21:5a:17:67:45:1c:83:13:0d:3b:d8:d7:1a:34:
f2:59:d0:78:6b:82:05:86:6d:5e:0c:ff:21:ab:77:
f2:10:a7:fc:9a:4e:6c:ba:6c:0b:2b:59:5e:bb:81:
f0:83:21:fc:7b:35:f1:a1:69:d1:c1:6f:1d:da:0c:
a5:e6:c2:70:11:4f:62:47:cd:1c:2b:9d:4f:85:85:
55:b0:2a:54:e1:a0:2d:d1:24:65:1f:8a:e4:a9:83:
52:3c:59:02:14:75:da:22:f9:a6:6e:ba:5d:fd:26:
b2:33:15:4a:70:87:7f:bd:b9:97:ef:96:d7:53:bd:
6a:8f:af:62:d9:00:21:b6:83:d1:ef:de:16:f9:f8:
bc:75:c1:8e:ee:29:10:e4:03:1e:6e:6f:e7:f5:fa:
18:e8:99:a4:e2:03:de:03:f5:f7:ed:77:fb:80:dc:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142194
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:9440::/48
Signature Algorithm: sha256WithRSAEncryption
6a:37:95:e3:a2:d1:bc:99:fd:fd:ec:9a:e5:72:9e:f2:95:4f:
39:43:18:c8:a6:1b:b9:3e:44:96:f0:0a:94:f3:0f:fb:8c:70:
50:2a:2f:1f:63:91:f2:7f:74:00:3a:61:eb:0d:ac:04:5a:31:
2d:24:20:32:cd:eb:3d:40:8e:be:07:7a:b8:d5:2f:4f:0c:d8:
6f:b9:99:f8:fd:e0:d0:20:1f:4b:a5:00:b0:9e:68:4e:11:36:
35:e3:5b:d8:22:93:2f:6e:de:cd:03:f9:bd:2f:1a:11:a5:a7:
4c:a6:e9:3c:9b:95:d0:3c:7c:27:b5:62:6d:d3:b0:fa:18:07:
14:f6:8a:3f:e0:32:a9:e2:f9:29:b0:d6:ac:9c:30:39:59:ce:
f4:3b:20:00:cb:5e:75:d9:06:2f:e7:8b:05:c2:5c:af:f3:63:
cf:33:e3:9f:bb:bf:6c:32:a7:be:ed:f2:2a:9d:06:df:8f:f5:
d1:2e:87:aa:3f:5b:60:57:a0:0d:8b:45:4c:bd:09:7c:da:5b:
ec:b2:39:8e:30:76:bc:42:aa:e3:71:53:9e:a4:8e:8f:e7:13:
c8:5f:29:95:1d:a6:5a:e8:58:7f:5b:4d:2b:2b:53:ac:9c:69:
ed:38:e8:76:01:b8:4e:57:67:4a:0b:f3:86:9e:9f:5a:fe:33:
8d:49:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:22 2026 by rpki-client