Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.cer (raw, json)
Hash identifier: vDdVLEWs6Sjq+nkp2S/oj9J0X9iVAMleqy2wC3b+xoY=
Subject key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D111
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Aug 2026 12:25:24 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 153169
IP: 2001:df4:13c0::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184593 (0x2d111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 12:25:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:66:30:40:f1:6d:87:46:90:ee:ea:f1:63:
71:13:2d:f0:a1:2d:69:ce:9b:0f:f5:84:60:23:7e:
67:2c:48:74:39:2a:e7:af:92:91:c9:d2:cf:fa:50:
13:c8:0a:00:b3:3b:73:77:59:d2:2b:84:26:75:d4:
a8:41:cb:9e:a8:8d:d0:70:45:48:7a:61:d0:56:3c:
28:35:c9:5c:68:6c:7c:f1:70:d3:55:6c:e1:3b:27:
0c:6a:18:8d:5e:17:e0:bc:83:da:46:f2:98:33:86:
cb:ce:e1:dc:bc:e8:26:16:93:d2:eb:51:69:e6:98:
97:24:f4:90:7a:87:f7:4f:5d:da:85:42:26:d8:b7:
84:31:20:6c:16:8a:31:34:74:43:81:08:d1:3f:7a:
d3:95:34:93:ab:3b:0e:bf:69:3e:f5:e3:dc:52:1a:
84:14:aa:9a:82:b4:66:33:c0:47:37:0b:b8:6f:56:
fb:05:aa:97:05:ac:c4:94:50:a9:cd:40:93:cd:d0:
0d:96:b1:4e:cc:09:31:8c:9a:54:62:2b:e4:93:7f:
6e:01:4b:77:20:bd:6f:50:e1:e5:d2:55:75:5e:95:
8a:61:ef:77:cf:ea:44:de:c7:b1:38:5b:01:8f:64:
18:36:b6:c2:92:82:22:2a:86:3a:be:c2:58:a3:80:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153169
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c0::/47
Signature Algorithm: sha256WithRSAEncryption
68:a4:91:49:33:f2:5f:1b:74:0b:f2:0d:de:c5:6c:97:6c:9f:
4c:77:c6:8b:5f:cd:37:e4:9c:87:a9:54:9a:b4:0c:c2:07:2e:
24:be:fd:8d:4b:8d:b6:82:80:8d:d3:a8:7b:ce:87:99:53:8b:
f6:fb:66:8a:d3:9d:74:a1:c9:86:f6:74:80:4f:8c:f7:c2:9c:
0e:0d:89:c4:74:8f:77:a6:6c:6f:07:5e:60:0c:55:fb:85:f9:
01:e2:6e:42:89:b8:29:b2:3f:a1:17:1d:77:96:66:91:fc:10:
2a:c4:99:09:8d:0a:fb:2d:5c:e2:70:e4:31:ed:e4:64:ab:d7:
f8:fd:e9:d0:62:62:2c:7c:fe:7c:d0:74:ea:ca:41:a6:4b:53:
7b:90:b4:e4:a7:20:7a:1a:c5:90:96:1a:59:22:59:ae:a3:ae:
5c:ed:2f:3c:33:99:de:ca:74:98:3c:80:9d:2a:6d:72:96:59:
d4:8d:53:5c:f3:c8:3e:0e:9d:cd:99:de:52:64:6c:94:b9:1d:
27:00:45:99:35:1a:cd:d9:8e:7d:86:79:1a:1f:c2:db:1e:63:
84:85:f9:a9:8f:0c:79:df:ce:b2:af:ab:ea:05:f2:02:10:1c:
81:5d:16:49:30:48:fc:1b:25:89:0c:b3:8b:8f:4b:35:f7:2d:
3f:3f:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:38:02 2026 by rpki-client