Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.cer (raw, json)
Hash identifier: VTSkfnr+4avc5qdKDQCU3nYrkh1ne+7eCgiaTifYZ0I=
Subject key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A4F6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Mar 2026 08:59:50 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 133780
IP: 2001:df6:6240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173302 (0x2a4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 18 08:59:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:a0:83:34:a6:c6:dc:fe:3b:04:53:e3:67:
26:80:59:86:e8:1b:2f:a0:c6:5d:fa:2c:dc:da:5e:
5a:71:be:24:8f:23:ea:9a:5d:24:b0:50:92:8e:c1:
f0:1d:63:7f:68:0e:4d:a9:f9:63:a3:65:d4:59:ec:
be:0a:a8:9d:d0:b5:a8:f2:0c:ea:ea:a3:4f:0d:8d:
b0:5e:ad:87:fd:2d:08:fc:4a:6c:06:67:c5:ce:33:
15:e8:36:be:6a:a3:43:32:30:5f:87:6d:31:44:b4:
ff:e3:87:4d:31:cc:a0:8e:3b:6c:60:cb:6c:0e:2c:
55:d4:2e:62:c0:80:4c:70:5c:58:fc:71:d5:e2:ad:
a1:84:4f:c1:93:fb:d7:95:27:5b:13:b7:c4:14:5f:
4b:15:b5:0a:1f:00:a3:d9:f4:f2:34:a8:06:9a:b3:
79:0e:0a:32:a5:c5:c7:c2:a7:0c:d4:c8:a0:e2:49:
ee:dd:f4:eb:65:2b:77:fe:a5:99:e2:6c:9d:8b:cf:
b2:fa:ee:a0:94:82:e8:9f:b4:b3:b3:61:60:3d:0c:
b1:8b:a7:af:80:ee:61:91:83:35:a3:26:45:e1:3f:
ea:8e:4f:97:6d:6b:7d:44:1d:cf:6c:1a:30:9c:27:
cc:38:c2:0a:35:f5:63:6b:13:db:b9:f8:02:fb:11:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133780
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:6240::/48
Signature Algorithm: sha256WithRSAEncryption
d8:04:c6:e7:e9:02:43:66:c3:99:c6:6e:05:49:92:ad:54:6b:
93:a1:ee:f7:f4:47:63:90:9e:b0:78:7c:ce:4e:fe:0e:9c:ae:
11:33:c3:f9:95:7c:07:c8:41:aa:1a:77:5e:82:dd:2c:23:fc:
e7:a5:c9:eb:15:de:c8:bc:dc:ab:96:a8:80:3e:64:e8:1e:b0:
38:3a:4d:af:35:5c:6c:20:a3:f0:a9:b2:48:b5:ab:a6:91:e6:
55:c2:7f:b2:2b:3d:40:5b:3a:fa:5f:e2:81:73:a8:fc:b7:40:
41:42:ed:ba:86:48:3e:2e:d5:0c:65:55:1e:19:82:d5:4c:61:
2d:af:64:e0:5f:03:6e:37:3f:c6:11:7e:6e:f5:d4:6e:12:4f:
ab:c3:8e:f7:65:2c:e6:a7:a1:fb:89:2c:a6:65:31:4a:bc:91:
45:04:9c:65:82:fe:85:01:5a:b8:b5:21:99:1c:18:44:c9:d0:
87:b2:2d:23:5a:1b:3c:af:ff:95:7f:64:4d:0a:1d:34:44:a5:
c4:e4:ea:b3:d5:7e:c4:03:03:e4:06:0b:d5:df:83:e1:4a:b9:
04:08:a8:85:8b:64:ce:60:f8:a0:ee:24:18:38:3c:e8:ef:de:
38:8e:65:b2:25:44:fc:e6:c6:07:c7:1b:5f:11:ca:ae:fb:1d:
b2:fe:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:25 2026 by rpki-client