Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
File: Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer (raw, json)
Hash identifier: by53iwCjZZZ3dvakAqFrsbhqbx/RZxz3kxSSDmhe8h8=
Subject key identifier: 31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D62A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 05:18:59 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154695
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185898 (0x2d62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 05:18:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A4BD5, serialNumber=31F935FEC9E2E70BCFBC5E64257C318C9BD93C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:f0:7c:f4:07:35:5b:c2:73:4f:60:23:d0:
9a:56:f3:d8:b0:40:4f:5f:f2:49:fc:37:22:cb:e0:
3f:bd:d6:4e:b6:2d:4d:a9:8a:30:37:22:09:8e:bc:
c2:05:b9:76:67:fd:8c:84:ef:74:8e:26:16:5b:b5:
1f:7c:ea:cc:0a:55:78:1b:3e:46:c5:89:64:58:5b:
7a:49:d5:44:de:55:ee:e4:28:90:e2:45:90:ad:57:
8c:d3:b4:69:4f:e1:33:42:e0:09:49:a5:29:36:8d:
3f:49:4d:d5:a0:1a:b1:2c:f7:d8:6e:87:fd:42:df:
2b:ab:7f:50:63:c5:b5:28:a2:dd:e0:a2:9b:ef:23:
0a:65:6a:45:91:cd:67:25:83:f3:b1:32:33:e7:74:
96:48:bd:ef:c2:1b:2a:69:8f:cb:db:98:6b:11:06:
25:19:14:8b:d9:77:30:a8:8d:c7:17:b5:4d:bd:4a:
6f:37:45:78:cb:21:a7:ad:94:05:d8:2d:d2:9b:93:
3f:13:1b:a7:61:7b:59:d5:73:3e:8f:69:54:e5:72:
c1:20:3e:7a:d9:4d:c7:e1:b4:f4:1c:96:9a:3c:b5:
1a:3d:9d:1b:c5:4f:74:4d:e1:43:17:06:a6:cd:9b:
27:40:5a:6c:7d:00:ac:30:17:27:f2:7e:3d:98:01:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154695
Signature Algorithm: sha256WithRSAEncryption
c6:22:99:04:eb:61:c5:3f:3a:a2:be:85:ca:de:a4:a4:ed:20:
b6:fd:5f:47:4d:d3:91:da:13:ba:bc:af:a2:03:25:3f:eb:40:
82:0b:81:f2:5d:4d:ea:29:5a:f1:9b:69:dd:9c:ad:a5:b0:02:
0a:82:29:d4:8e:ef:9e:ec:8d:f3:02:b5:98:58:58:32:7a:31:
d7:17:81:60:e2:c9:8e:6d:dd:68:56:9e:b0:c5:4d:a2:2d:d3:
80:a6:c5:be:40:c8:a8:00:e9:72:e7:c3:e2:fc:a1:9d:ca:56:
61:df:b5:ac:2d:67:3f:be:2d:c4:68:3f:57:fe:bc:57:3f:8e:
53:7d:17:2c:ba:f5:36:38:8e:26:b1:91:ba:2d:b6:9d:b9:98:
40:c7:e8:74:cc:c8:e7:e1:6d:d1:14:26:7c:eb:63:4d:0e:1e:
f9:08:8c:e9:76:ad:8c:2f:82:ce:23:98:79:ba:2b:23:5d:1e:
99:81:ee:39:8f:41:b9:d7:70:3c:90:5f:7a:56:68:ec:e8:f7:
c1:0a:16:37:fc:df:cc:49:cd:d6:57:d7:5f:ce:ca:fc:8b:3b:
83:82:21:97:a7:7e:a2:fa:f4:4b:c0:22:b5:68:27:27:88:95:
70:03:9d:89:27:40:21:63:f4:57:f4:78:10:cd:29:6b:49:f0:
20:0f:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:02 2026 by rpki-client