Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
File: _knPM_vkJHsroe6aVISnQK07bg4.cer (raw, json)
Hash identifier: N4ISrJYhPUCxjBSVui6nHI1aYxG0hfPJZ1c8xdTVCP0=
Subject key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D24E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 12:34:53 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154158
IP: 2001:df6:3c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184910 (0x2d24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 12:34:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:c6:ac:b7:2f:04:ea:58:78:8c:a9:c2:fc:
8d:19:c4:ae:e4:94:e7:e7:2c:af:a0:c9:d7:75:05:
44:cc:c9:cc:4b:96:9d:d2:83:f8:c6:a8:94:06:28:
cd:52:e8:17:8a:9d:08:07:de:a7:46:2f:63:fb:8f:
83:91:2d:d0:71:4f:f1:00:9b:f5:13:50:30:9c:34:
05:06:a5:dd:10:ea:e1:c5:c8:06:11:d6:e7:dc:a8:
4d:4a:13:fc:ad:da:66:58:bf:af:18:bf:0d:f3:43:
53:6a:5a:97:e3:70:49:d4:3b:88:ea:7f:ef:04:d9:
cf:b0:6b:83:66:80:f3:48:c4:12:6b:97:99:64:a3:
31:83:d6:b4:06:9c:3e:91:31:aa:eb:d4:63:de:1e:
5a:36:19:f0:c2:d6:b9:03:f0:50:27:b2:15:33:78:
6f:67:e2:3d:0c:49:4f:87:47:32:77:23:d7:cf:ea:
de:36:7a:4d:1b:aa:3e:03:6d:8a:5b:f6:77:8f:12:
0a:b1:09:7f:86:04:d4:f3:5f:4f:c5:d9:fc:53:d6:
95:7d:2b:8e:57:83:a0:65:5d:b2:ae:33:cf:14:24:
58:9e:b7:15:d4:de:39:cf:a5:15:26:b0:bf:bb:2d:
1a:2f:4b:fb:aa:f7:91:fe:e0:4e:df:b5:a1:be:89:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154158
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
31:69:49:17:cd:f6:1c:b1:75:1f:d5:99:ed:4d:9f:0e:70:0c:
18:15:f4:95:2e:11:d5:57:92:96:85:e3:31:d4:a7:cc:90:a3:
37:ae:31:7f:57:dc:0d:99:19:96:9a:7f:a8:81:6b:97:78:bf:
fd:1d:c9:c2:88:15:de:c7:88:9f:f3:21:09:52:a6:27:db:d6:
81:f8:73:29:d0:50:18:7e:61:0d:28:8e:a1:e2:2b:57:49:a3:
5a:27:5c:ca:0e:13:f4:f1:86:1e:40:80:24:2b:6f:12:28:f5:
b9:7c:3f:01:b0:7b:39:14:50:38:0e:56:79:58:d5:b7:58:f8:
e6:d0:55:42:5c:d6:64:47:38:34:a5:6a:95:d8:62:f4:a1:e6:
19:f9:0b:49:9b:44:39:01:9a:ea:88:a5:2c:5c:0c:00:cb:ab:
56:a4:15:3b:34:a2:67:a5:8f:98:e8:6d:bb:4b:16:68:76:00:
39:d1:21:c2:e9:13:31:49:f7:44:1a:48:a8:a1:20:d0:fe:95:
ba:8f:5b:9f:78:73:54:ca:93:5b:cb:b0:9b:75:61:fc:c7:85:
ef:df:9e:21:07:c8:f7:43:2f:bb:6d:19:0e:67:16:6f:be:5f:
4b:ff:9b:2b:c8:22:41:67:a7:03:f4:f5:bb:d7:82:16:74:0f:
c0:c4:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:32:52 2026 by rpki-client