Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
File: FggPXxr0qlYST_cZXRPoW5OllSE.cer (raw, json)
Hash identifier: 0dafQjHyjK9OR7vU3m0jS3sFFicgunYipg4fUMhW14w=
Subject key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B151
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 13:55:46 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142422
IP: 203.16.0.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176465 (0x2b151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 13:55:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:08:90:a3:dc:c7:ae:29:30:fe:88:99:1f:
b1:ea:69:ee:0b:6c:fc:ae:8c:5d:c1:74:95:0a:3f:
61:1d:d1:29:2f:89:93:f6:41:a9:75:4d:46:28:7c:
f0:1e:81:6f:39:d7:92:38:39:51:b9:f5:4f:21:71:
9b:c1:29:9c:6f:f8:21:40:d4:38:ce:14:56:2e:cb:
11:0b:1b:16:17:5f:29:3a:8d:6e:8b:ae:b1:1c:1c:
e1:5f:2e:72:27:23:43:7c:96:fa:42:d0:a0:40:c1:
e2:72:ba:e0:b5:2d:ff:9d:4a:d7:d0:37:da:6d:35:
9a:51:91:b4:4f:8d:02:3e:07:39:92:eb:19:34:99:
c7:38:8e:3f:e4:52:5b:0d:80:0f:cc:03:88:23:1f:
2d:25:69:5f:18:5a:4a:e1:3a:3c:17:01:c1:61:09:
d1:d2:72:4d:f3:1e:31:39:fb:7a:22:14:29:39:7d:
0e:21:21:c3:44:0d:b9:9d:f9:b0:23:98:52:17:99:
66:d5:30:a7:94:70:51:7a:78:b4:cd:60:b5:67:5c:
3e:db:21:f6:e1:e0:39:38:ba:a8:a8:18:e8:94:b8:
c5:90:7c:a9:ab:fa:ca:aa:8a:a5:50:dd:72:e5:f4:
4f:e7:16:a3:5d:71:91:d2:6b:47:2f:29:d1:3b:8d:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142422
sbgp-ipAddrBlock: critical
IPv4:
203.16.0.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:bd:81:48:f4:27:cd:f0:ef:fa:51:66:bd:04:7a:5b:0a:ca:
5f:e5:9f:ea:12:1b:0f:45:49:74:e8:4e:53:0e:d6:fe:e8:8e:
ed:38:2c:d7:6b:4e:8a:24:36:f0:75:bf:f9:7f:3d:9f:0b:87:
db:9a:6a:93:96:c8:2d:30:d4:6a:91:4b:10:54:b4:ce:2d:d5:
51:13:72:c6:0c:22:be:db:4f:55:0a:e2:ab:1e:ca:99:59:32:
86:ad:e3:ee:4b:42:f5:a9:6d:f7:bb:b6:b5:0b:f0:00:59:09:
98:14:60:c3:3c:22:a0:a5:c1:d9:b8:d4:49:75:1a:ec:19:5f:
c1:15:7f:7a:dc:b2:c1:78:ec:5d:f5:1e:aa:68:9c:a1:c1:1f:
03:e2:28:66:e8:12:80:7d:78:9a:ff:ef:4b:63:a6:5c:5d:b7:
23:6a:3a:4c:4e:20:e5:2f:7b:c2:1d:4e:76:c8:6f:03:a0:e8:
29:ac:82:77:a5:a4:5b:5b:63:21:66:ad:27:3e:a6:f3:d3:56:
fd:07:fa:70:c5:e5:44:11:66:eb:2d:77:11:f8:91:b1:c9:de:
b6:2e:c8:54:d1:87:d9:c7:a9:56:86:59:53:d8:d6:83:99:17:
7b:55:ba:7c:f0:47:6a:d9:7b:07:ee:0f:5f:78:8c:c6:2a:5a:
7e:09:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:30 2026 by rpki-client