Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
File: Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer (raw, json)
Hash identifier: r4V7nDdXlH/Xsvp5iOtsyLuzfyx1jk5dMeFHwPH+RSY=
Subject key identifier: 61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jun 2026 13:39:25 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 85.155.72.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21438 (0x53be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 10 13:39:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9181375, serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:7b:7b:ab:e1:16:fe:25:35:c4:cf:b4:0f:
94:81:db:67:7a:ab:65:77:6c:38:79:e6:98:1f:05:
ce:0f:eb:1d:59:d1:05:be:12:4b:1a:c8:aa:c8:34:
83:d1:3a:8a:8d:36:2f:62:10:6e:e5:ff:43:b2:98:
4c:7b:24:c6:ce:36:4b:f4:fd:90:3d:57:b2:bf:7e:
a7:73:9c:4e:f2:96:10:90:2f:70:cf:b1:81:89:0b:
52:cc:70:a2:a8:81:72:0b:ba:57:7a:bf:fa:a4:f8:
3a:ed:a7:42:10:e5:50:53:45:7a:2d:9b:1b:23:89:
9f:6e:b6:2b:68:13:55:8e:15:82:2f:1c:24:cd:5a:
53:de:c5:94:d3:c2:2f:9c:7a:06:34:47:f5:85:40:
3b:a4:1a:97:40:3d:9c:67:13:4a:aa:ef:a6:ec:8f:
41:90:83:6a:d8:cd:54:db:45:88:67:3a:15:c6:89:
a7:56:84:ed:3d:b0:0c:9b:b4:12:59:98:cc:21:e6:
60:65:8b:75:d7:3a:92:85:8f:05:6b:42:4f:f2:cf:
f6:6e:32:0f:5c:95:02:7a:7e:39:2a:df:43:1c:e7:
d2:8b:09:e9:ae:20:ea:23:8e:38:46:59:90:61:6a:
cd:18:21:bf:ea:b9:67:a8:8f:a9:ca:80:0d:55:aa:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
85.155.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:fb:26:78:30:01:0d:92:ad:81:59:0b:8b:01:2c:5b:3a:6e:
7f:42:5c:c0:54:3b:6f:02:98:1d:ac:75:62:15:70:52:4d:6b:
15:89:25:5d:6a:ce:68:fe:e9:e6:4f:e2:3e:fa:99:b6:a8:88:
d9:25:c5:fc:ec:89:67:f9:bd:4a:52:26:bd:e3:7a:63:c5:45:
17:6f:28:9d:bf:ab:d0:80:d2:8f:11:f5:af:6e:b9:79:2d:07:
a5:03:af:e3:85:a2:36:b3:cd:67:02:7a:44:1f:fb:d4:dc:91:
5b:7a:32:6a:8c:fb:a3:c8:58:8f:59:26:de:5b:61:ac:6c:5e:
97:78:7b:f7:7c:95:80:cf:4f:3e:43:f0:c2:ce:98:d4:2d:a9:
ca:a6:cf:b4:66:87:c9:2d:e6:be:56:d1:85:4d:dc:52:53:49:
18:98:fd:44:5a:d8:37:37:c5:0b:15:8e:a3:09:ef:27:b6:86:
4d:7f:bd:58:c7:f3:97:fd:dd:68:a3:4c:d0:30:fe:7b:bf:cd:
92:d1:3c:d8:ba:04:6d:d2:f8:ae:ae:66:c1:48:20:8c:59:3f:
04:6d:47:f4:3f:7f:03:53:85:85:cd:9f:c6:77:e4:dc:2e:8e:
6a:fa:10:10:99:ba:9a:07:2a:08:72:04:78:f6:7a:d6:46:05:
fa:62:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:32 2026 by rpki-client