Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
File: FFiKS-nrikuZgtGyXesMYHOK77s.cer (raw, json)
Hash identifier: 72BOllfNSJpnOwCfiuHZIsF6yPpg4om7fIS1wItKs0M=
Subject key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026592
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Sep 2025 20:48:11 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 147008
IP: 103.172.191.0/24
IP: 2001:df0:f8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157074 (0x26592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 20:48:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:14:b3:fd:38:40:7f:98:5e:b3:38:e2:b5:
63:e0:87:8e:9e:0a:dd:b3:51:5c:99:44:cc:35:76:
ee:60:35:32:2b:05:96:d3:8d:5e:7e:90:c9:19:61:
b6:d6:b0:e4:5d:cc:43:5d:02:50:c0:93:6c:16:07:
49:c0:73:d6:a0:9e:bd:e3:fc:d4:cc:e0:79:68:c3:
e9:6c:da:12:0b:e3:53:30:2c:6e:ae:96:21:d8:50:
f7:cb:52:ba:26:6a:2e:23:09:9a:23:10:25:55:18:
d1:b2:c9:74:18:40:33:c1:fc:68:1b:2c:78:67:39:
81:09:95:dc:eb:83:88:0b:54:b4:58:30:64:be:c1:
ba:1f:75:9b:88:da:a1:69:f6:be:21:db:59:b0:72:
85:3c:0d:3f:6e:82:cf:ae:5a:a9:5c:4e:f7:20:87:
d6:7b:0e:d5:10:4c:af:d7:bb:31:79:f1:7c:bd:16:
71:51:d2:05:96:37:e3:3f:68:ce:35:ef:28:35:c3:
68:f0:48:f3:d4:e3:9c:8e:ee:14:3f:4a:b9:25:3c:
44:bb:4a:5a:3e:37:81:b2:56:25:b1:cb:79:82:40:
b0:63:85:1e:7a:b9:ed:57:60:8b:20:51:2d:24:e7:
ed:7a:5e:9d:6d:e6:48:85:bc:40:bb:97:ed:22:39:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147008
sbgp-ipAddrBlock: critical
IPv4:
103.172.191.0/24
IPv6:
2001:df0:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:8a:b9:c0:a1:d0:87:86:b3:26:ac:6f:2a:9e:ba:38:47:bc:
c2:0a:a9:c5:4a:77:d3:d9:1a:f9:b1:e0:96:21:88:0a:42:fe:
8e:89:45:e7:a3:47:7b:eb:d7:c4:ca:39:db:a6:1a:80:4e:9d:
17:46:38:52:19:3b:80:d1:be:15:56:8d:0e:cf:40:00:c2:8b:
66:dc:4f:88:b7:1f:f9:3f:5b:d7:04:76:a4:aa:b1:2c:9c:fb:
9c:97:36:1d:e6:d7:76:08:dd:cb:2b:b0:85:48:68:7f:0a:de:
d9:45:7d:88:06:d5:3b:22:73:d5:a6:55:26:54:2b:60:56:e3:
7c:22:67:7c:4c:03:cf:ec:d1:b9:04:f8:49:43:65:87:fe:53:
fd:ea:7c:8f:8a:8b:b4:ad:d6:12:b0:76:61:37:b5:01:e8:84:
99:ad:c6:14:63:3f:89:92:7e:07:a3:07:08:d8:2d:4e:8e:2c:
4d:db:9e:ca:05:a9:b3:6c:c8:70:89:67:d2:63:ef:41:26:3e:
70:99:17:c8:10:27:45:66:9a:63:2f:72:ff:fd:b2:e9:b0:8e:
5b:e4:ff:d6:f2:c9:e8:01:09:1e:74:dc:25:28:24:7c:9f:29:
be:2e:d5:47:ca:10:98:7d:46:57:6d:6e:76:2a:3e:62:a5:c8:
da:d8:4e:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:39:58 2025 by rpki-client