Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
File: vcSlFjMX9zCX8CejQrhgp5LX8dw.cer (raw, json)
Hash identifier: cMAWc2FVWtAE/pyMD+ug6sM+Xo3m+WGYlrJDTUwY1qo=
Subject key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D741
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 04:32:23 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 153307
IP: 2001:df4:3340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186177 (0x2d741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 21 04:32:23 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:91:3c:34:08:10:d2:bf:d9:11:08:e5:45:
e2:d8:d4:4a:cc:88:2f:4c:a1:b6:8f:29:a0:53:b8:
ef:11:2e:41:a6:d3:ac:3b:a2:82:18:b2:82:d0:e4:
d0:85:14:8d:49:2c:b6:15:3a:4d:45:8e:3f:1b:54:
eb:f0:26:50:3f:b1:aa:a6:55:a9:57:93:ac:6f:ef:
da:7b:d4:30:fd:1d:ba:65:60:34:5d:eb:93:1d:b2:
d6:cd:2d:e5:de:fb:5b:0a:53:97:0c:7c:35:25:4f:
a4:df:16:be:ea:33:92:14:1e:cf:78:77:45:b6:86:
61:43:68:fd:d2:26:0d:b5:92:19:67:65:8b:3e:4f:
be:ad:1a:a7:37:45:2d:42:ee:dc:aa:a6:30:b3:98:
8e:34:58:82:a7:62:5d:ed:3c:c9:16:81:2e:5f:09:
e1:5d:3c:2c:83:34:0e:6e:46:fb:95:00:d1:61:34:
81:d8:0d:a3:3f:ef:97:39:2b:5d:eb:96:1f:1a:e9:
be:84:ea:24:d7:1c:33:8e:5f:2b:98:bd:8c:73:62:
85:ab:5c:9c:30:e9:d6:f8:a5:c6:a5:6c:d5:7d:00:
9a:5c:af:02:93:28:92:46:0d:75:dc:33:61:4b:cb:
ab:e9:d9:90:ef:13:25:58:56:d4:3e:19:75:b5:55:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153307
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3340::/48
Signature Algorithm: sha256WithRSAEncryption
47:ff:b1:2a:cc:24:1e:0a:e1:12:dc:b9:84:bc:ba:33:63:70:
33:d0:8c:73:59:c0:08:79:8f:a4:52:54:bd:6f:65:76:77:ec:
d2:e4:d0:50:21:75:99:45:11:5b:e8:17:f0:78:4d:b3:b2:21:
46:08:db:43:6c:41:ed:5c:bc:88:4a:6c:83:da:9b:6f:6b:fa:
e4:93:d3:57:02:95:59:d9:d5:79:7d:46:7c:39:28:06:34:65:
1f:9f:ce:5c:7a:60:dd:21:59:ef:0e:d8:45:ac:9e:49:73:9b:
e1:0f:59:93:3e:d4:54:43:14:ea:40:02:5b:ef:e1:d4:67:d1:
0f:56:b9:99:18:a1:5b:da:0e:88:96:ec:e3:f2:54:e3:92:ab:
64:b2:15:cb:c3:3d:28:be:4c:ec:f2:65:b8:e4:2b:cd:8d:b7:
f9:0a:21:e7:ca:1e:9c:51:cc:d1:72:88:b5:71:eb:3c:b6:74:
93:a0:9c:27:aa:df:c7:f6:3c:ca:30:e0:9c:c1:f6:4a:b5:8c:
2d:a0:11:04:17:0a:9e:4f:b3:0d:60:e1:73:19:92:af:db:6f:
69:d4:7f:78:1b:14:9b:77:21:a1:f6:22:1b:1d:33:26:00:a1:
c4:41:0b:54:75:f5:4b:13:50:b3:57:a0:e6:eb:f4:43:61:22:
6b:89:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:07 2026 by rpki-client