Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
File: WYMt_ndUWn2J_bBhkVxnGef4K98.cer (raw, json)
Hash identifier: Dq4O6hOEb9weQTLR8TqFH2gQSqW/rM6Yd5TS+zdGD7Y=
Subject key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5168
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:04:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.44.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20840 (0x5168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:04:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:1e:8b:2e:cd:e8:c5:17:74:ad:3f:84:2e:
f3:ca:31:2e:0b:6e:0d:11:44:8c:88:e8:ac:f7:13:
7f:95:7d:cc:75:0c:11:d4:70:71:41:1c:19:fe:4d:
aa:20:ec:b2:83:c2:ba:d4:0c:c3:06:22:30:5b:d2:
bf:5d:23:2b:c0:ef:bf:9c:44:01:06:a0:42:26:ae:
a7:a5:cb:92:1c:ec:06:d0:5a:fc:1a:81:e1:a0:25:
31:c0:d1:ac:69:ef:fc:2a:58:17:62:e5:d8:2c:94:
f4:42:ba:3c:ff:a4:2a:38:77:ed:0a:00:fc:80:f1:
8c:23:e8:ca:52:1f:5f:3a:b3:5a:3c:5b:f2:a9:cf:
0c:9c:10:b7:b8:a9:49:fe:f6:a9:0d:87:c0:c1:dd:
2c:e2:0e:62:31:fd:d5:10:05:be:68:e7:d5:a4:1a:
cf:6a:b8:ab:99:d5:11:4b:52:2a:d3:6b:55:8d:2a:
a1:53:23:28:f3:01:1f:cc:b5:d6:d9:af:fb:24:4e:
1c:61:90:1d:7d:1e:bd:b5:a9:19:70:cc:91:3d:8b:
66:43:e8:a4:8b:ba:0f:6a:c4:f8:d9:93:57:e4:19:
dc:6b:68:b4:d0:12:1e:5c:cd:30:c3:48:87:cf:cb:
27:69:76:a5:90:cd:7a:93:30:23:90:62:83:dd:55:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.44.0/23
Signature Algorithm: sha256WithRSAEncryption
29:3e:9b:95:b3:2a:6a:83:96:aa:f3:38:40:0e:88:6d:47:b5:
fd:57:87:62:69:a3:0f:8e:ca:0c:fa:6c:09:8d:3b:17:f5:77:
82:36:5f:4d:84:d1:c3:75:3a:b3:b4:88:38:21:42:71:c3:d7:
c0:b6:31:71:9a:3a:ad:47:07:ff:e4:1f:dc:a8:1c:35:26:53:
e7:9c:22:25:ec:69:4d:20:9b:0f:d0:2f:ac:b3:f0:b5:8b:a0:
f6:e5:56:63:e2:3a:b3:e7:c7:d4:fb:0a:38:55:78:21:48:6a:
61:fa:dd:2e:4c:3c:73:e6:a9:aa:5a:a8:b2:48:04:cc:21:0b:
f1:5f:32:88:86:0d:4b:42:ea:fd:38:66:f1:44:ea:e8:2b:df:
58:e9:7b:fe:6f:4d:be:ba:03:2f:80:92:93:79:4e:1f:41:4e:
c9:a4:fb:cb:56:b6:05:7e:88:0a:0a:4f:66:ce:39:72:63:be:
b0:51:a9:e8:22:b6:b7:f7:10:ac:b1:15:28:5e:66:ed:fb:44:
f9:52:ba:2c:10:48:03:55:67:7f:fa:f0:f0:5c:db:1b:97:47:
57:be:95:bf:82:ec:76:39:b8:c6:23:81:85:c9:ec:d2:51:db:
3a:8e:31:bd:99:7e:06:2d:3a:72:db:fc:6b:59:d2:b1:3b:69:
e5:77:90:59
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMjI3MDMwNDI4WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEODYwMTExMC8GA1UEBRMoNTk4MzJERkU3NzU0NUE3RDg5RkRCMDYx
OTE1QzY3MTlFN0Y4MkJERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJ/ZHosuzejFF3StP4Qu88oxLgtuDRFEjIjorPcTf5V9zHUMEdRwcUEcGf5NqiDs
soPCutQMwwYiMFvSv10jK8Dvv5xEAQagQiaup6XLkhzsBtBa/BqB4aAlMcDRrGnv
/CpYF2Ll2CyU9EK6PP+kKjh37QoA/IDxjCPoylIfXzqzWjxb8qnPDJwQt7ipSf72
qQ2HwMHdLOIOYjH91RAFvmjn1aQaz2q4q5nVEUtSKtNrVY0qoVMjKPMBH8y11tmv
+yROHGGQHX0evbWpGXDMkT2LZkPopIu6D2rE+NmTV+QZ3GtotNASHlzNMMNIh8/L
J2l2pZDNepMwI5Big91VYa0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRZgy3+d1Ra
fYn9sGGRXGcZ5/gr3zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDg2MDEvNzNBQTNFQkFGNkFGMTFGMEJFMUVCQzVGNDM2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4NjAxLzczQUEzRUJBRjZBRjExRjBCRTFFQkM1RjQzNkY1NkJDL1dZTXRfbmRV
V24ySl9iQmhrVnhuR2VmNEs5OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeLDANBgkqhkiG9w0BAQsFAAOCAQEAKT6blbMqaoOWqvM4QA6I
bUe1/VeHYmmjD47KDPpsCY07F/V3gjZfTYTRw3U6s7SIOCFCccPXwLYxcZo6rUcH
/+Qf3KgcNSZT55wiJexpTSCbD9AvrLPwtYug9uVWY+I6s+fH1PsKOFV4IUhqYfrd
Lkw8c+apqlqoskgEzCEL8V8yiIYNS0Lq/Thm8UTq6CvfWOl7/m9NvroDL4CSk3lO
H0FOyaT7y1a2BX6ICgpPZs45cmO+sFGp6CK2t/cQrLEVKF5m7ftE+VK6LBBIA1Vn
f/rw8FzbG5dHV76Vv4Lsdjm4xiOBhcns0lHbOo4xvZl+Bi06ctv8a1nSsTtp5XeQ
WQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:55 2026 by rpki-client