
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer (raw, json)
Hash identifier: j6ImX02FTJ6xLkWasjTJDtNdTQkUt8xshn1L2szSlcI=
Subject key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C0A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jun 2026 12:55:23 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 2402:4680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180384 (0x2c0a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 12:55:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:23:8d:5d:6b:c7:d8:10:1d:fc:c5:02:89:
17:99:22:a0:12:3b:5b:b3:44:92:93:92:dc:70:ac:
3e:23:1c:c6:9c:b2:63:54:10:13:62:34:25:5e:7f:
d4:71:22:af:4f:cf:cd:2c:36:4f:6d:cc:56:a0:18:
cd:a4:99:47:15:56:7f:e6:40:a7:68:91:57:ee:41:
17:b8:47:e8:0a:4e:52:3a:1a:ca:91:4d:ca:3d:3a:
51:16:4e:d3:7b:95:03:90:dd:5a:a2:b8:51:a4:54:
2e:1b:ad:9d:c8:e2:8b:a9:01:64:41:38:1d:61:35:
43:ae:43:3c:ff:5d:46:83:10:6d:03:70:1e:16:1f:
08:f1:69:54:eb:a8:de:c2:3f:52:d0:8a:68:4d:4f:
58:37:7e:0a:fe:d8:5b:b9:02:58:94:8b:fd:e0:a8:
88:b8:79:96:f1:e3:c3:f2:19:4d:a7:e6:c5:56:46:
4c:9b:a9:cf:ea:d8:d1:c9:92:6d:e7:58:1c:dd:fb:
67:ee:9c:87:a0:49:cb:7e:03:9c:c2:19:21:7b:95:
fa:a8:af:c6:c7:3a:fb:05:6b:e5:11:a2:9f:11:3d:
d5:07:c6:8a:ee:c6:e1:ff:b8:b1:79:f2:eb:bd:85:
50:57:20:01:f7:c8:c1:6a:4c:38:4f:f7:3e:a5:1e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4680::/32
Signature Algorithm: sha256WithRSAEncryption
18:8f:2a:c1:9d:61:04:ad:5f:1a:c0:7d:5f:c2:14:da:c4:75:
5a:63:4f:c8:db:7e:65:94:d0:93:5d:c8:3b:ea:50:d3:7e:ee:
0b:34:c7:18:dc:8e:7b:d8:05:14:2e:6f:ff:3f:4b:64:89:d7:
fc:52:71:74:b4:a6:d0:35:64:96:cb:9a:61:4d:bc:db:9c:be:
7e:6c:06:6b:17:85:e0:2e:46:85:4f:fc:57:b4:42:18:8a:c6:
e8:5d:c9:4b:10:b6:5c:71:3a:86:c0:64:bb:cb:1c:09:6b:3a:
6c:14:44:25:47:3e:1e:62:9b:7d:63:e2:0f:4e:b5:3c:9b:4b:
6f:ba:a5:01:49:5a:f8:07:b7:50:76:5e:98:79:18:d9:3e:f0:
be:99:d4:31:7c:77:b7:a1:dc:21:9f:07:1f:f0:e0:bd:de:40:
1d:d6:40:fb:0d:a2:ac:a5:94:fe:78:3f:e4:15:0a:4f:ef:d5:
02:04:a5:98:78:f6:af:f0:da:95:40:f7:05:73:c2:42:53:0c:
0f:82:73:2e:4d:6d:26:38:bb:15:33:77:39:8c:62:4d:63:f3:
c6:ad:7a:19:c5:0a:8f:95:b2:8f:3f:81:c4:f0:1c:a1:ac:ba:
e2:42:06:c4:fd:b7:8f:08:b7:2c:e9:90:58:e0:68:11:1a:9a:
e4:cb:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:07 2026 by rpki-client