Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer
File: afotkTN0HoMAQ-tA5A0ivzU4684.cer (raw, json)
Hash identifier: bg+wNOrrjIRsTmZKhxXivnR8RE+Qk35o2lXp8VDF7Bg=
Subject key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029CFC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:00:11 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 142234
IP: 2001:df6:a040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171260 (0x29cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:00:11 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:6b:06:4f:ce:68:63:d1:ba:1c:88:33:27:
31:1f:93:14:f9:dc:30:c3:92:86:b1:2f:6d:88:8d:
51:67:9f:08:cd:70:53:ed:9f:87:b5:64:88:61:13:
01:08:f0:5b:4e:55:c8:a7:21:7f:78:6f:46:8a:fa:
aa:6b:2e:b5:5e:58:12:c2:4c:a3:0a:d9:46:7d:fc:
66:c2:4a:b9:85:52:dc:f8:42:e8:4f:38:34:e0:6b:
51:52:25:68:1c:c5:be:df:40:72:0c:b6:dc:a7:fa:
65:72:5c:9b:e4:a4:47:b3:b5:90:90:af:3f:6f:8d:
5b:cd:7b:5d:b4:9f:43:04:35:23:b0:b8:b5:d3:37:
89:72:7e:19:74:8b:4f:55:a1:34:ca:b4:34:d9:66:
b9:a7:5c:d0:91:76:b7:17:bf:0f:c5:8b:46:d1:04:
a2:a6:7f:da:5b:a9:66:f3:01:0d:3b:86:3f:95:61:
5d:e1:bd:5a:8c:a9:48:f8:0d:1b:10:2e:cc:ab:66:
77:64:65:43:10:da:70:80:3f:d0:f4:af:2f:52:1b:
2f:ce:35:87:ca:89:16:e5:6c:e3:a8:69:5c:63:2b:
45:71:b6:87:67:1a:86:2a:e2:2c:bf:98:06:82:d5:
1a:03:5e:f6:52:78:c6:69:27:e8:b3:0f:94:80:be:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142234
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:a040::/48
Signature Algorithm: sha256WithRSAEncryption
69:c4:53:df:37:84:19:0c:c0:b3:53:59:32:72:13:36:fe:92:
ce:ac:3d:3a:e5:d0:59:7a:fd:a3:03:0e:ec:dc:1d:7b:f2:e2:
20:e6:5d:5a:67:0c:4c:54:2d:be:f1:b4:98:a2:0e:8a:2a:a1:
27:cb:55:68:db:3c:3c:bb:a3:d9:7d:25:11:8c:74:d7:20:2f:
f2:c7:7f:2c:72:bf:08:c4:6d:5e:9f:03:53:f5:8e:1c:f6:6c:
eb:dc:d7:fb:ec:1b:3a:39:70:a6:5d:1c:02:7b:6d:33:a5:fa:
a2:41:30:56:c9:d8:16:b9:e4:74:ed:ee:0a:63:a4:aa:80:4f:
f5:41:0b:d1:5a:7b:0b:58:df:d4:41:49:cc:ca:0b:e0:a6:1d:
04:dc:f2:0f:6b:26:99:c8:4d:71:db:fb:96:54:94:f4:3a:8e:
e7:b3:2a:35:3c:c0:11:b9:93:42:e5:04:71:66:a6:95:38:c0:
20:1e:15:4e:3d:cc:c0:13:9d:74:9e:30:ee:bf:86:67:d1:63:
de:c9:3e:be:59:2c:5a:45:0c:04:1c:9e:97:76:d4:03:63:29:
4f:ee:16:00:ff:56:b2:94:26:77:2e:02:f5:d9:b4:bf:0a:6f:
fa:1c:1f:86:bb:c3:85:48:64:38:f0:7f:21:37:d2:0a:61:de:
95:f5:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:14 2026 by rpki-client