Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
File: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer (raw, json)
Hash identifier: JocFZl4e/aglyAmULZ/iNol5Yfp3fMNeKTR6Ec/2Xpw=
Subject key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5132
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:41 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.140.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20786 (0x5132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:41 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:42:66:ef:37:6d:b0:e7:19:95:c6:01:15:49:
af:8e:1e:4e:21:04:25:5b:e3:64:87:b7:57:d2:ea:
94:e5:dd:a7:be:e2:da:cd:15:3d:4f:7c:e2:85:ea:
0a:e4:48:07:19:14:23:2c:c5:44:8c:7f:0a:01:05:
9c:3e:31:1d:f9:2d:d2:c6:d5:c0:9e:a8:24:da:ec:
ad:78:e3:d1:a4:41:f9:6c:27:7c:a5:35:e8:55:21:
81:38:ba:2b:15:44:10:27:c0:70:a5:49:dc:49:34:
b6:85:66:0f:4a:ab:7e:55:52:6e:b7:f7:c3:3f:fc:
8b:91:c7:f5:d2:ce:82:18:cc:52:31:6a:ce:07:6b:
51:55:b2:e4:c7:60:b2:82:71:92:53:52:e2:67:58:
22:2b:4c:d5:03:37:3c:49:08:0a:3c:b0:11:f5:c5:
3f:c1:32:98:b6:b8:ac:ac:5e:f2:12:88:8f:a3:7c:
6d:ff:18:90:00:d2:54:c9:47:be:e9:b2:2e:2a:c7:
bd:f8:92:0b:49:02:a4:7b:a0:ed:3c:e7:69:1a:2d:
51:a1:aa:ef:81:26:be:db:18:f8:dc:19:76:e8:01:
4b:2f:e9:0f:ae:7e:80:06:8f:26:b8:82:6e:5e:c3:
3c:c4:67:ba:a0:d4:8b:b1:4b:b7:18:86:2b:20:d4:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.140.0/23
Signature Algorithm: sha256WithRSAEncryption
12:28:c7:43:29:37:ed:aa:d4:87:63:8c:80:21:93:72:32:64:
59:6e:30:14:56:72:8e:b2:a4:e7:92:9c:c8:0d:e5:35:3a:fa:
8d:8e:a8:ad:f5:46:1c:60:ec:39:c8:0e:f6:1c:cb:4b:fc:d7:
ed:6a:98:f6:4a:69:be:ea:db:58:6a:e6:30:ef:fc:1f:75:54:
ab:41:2f:5d:e6:2e:a1:c9:56:e9:d9:f9:be:01:e7:02:32:53:
14:5e:c6:4b:e3:76:d5:e9:04:66:81:80:ec:58:fc:6a:dd:0b:
96:0f:91:fd:9e:7a:f8:10:f1:bb:68:34:88:f4:a1:e3:19:b2:
b6:1d:34:7d:e2:af:a8:9c:1f:bf:b8:69:a6:15:bd:b7:0c:26:
e6:7e:b6:3f:20:56:d2:58:a2:a6:2e:96:b9:70:ba:bd:2a:a7:
d3:09:a7:b5:3e:9f:bc:c9:94:d6:66:90:13:70:39:0d:61:e7:
05:b2:e7:81:67:a0:8e:f4:38:c4:fa:25:c0:aa:4f:5e:14:e1:
1d:72:dd:cc:44:c3:4a:14:ce:9c:14:f5:3a:36:b5:3d:4f:36:
b6:2b:9b:5a:e6:e3:b3:7d:82:00:31:b3:0d:21:2b:9d:4d:43:
f4:a0:cd:97:30:1f:ff:8d:2c:6c:d6:a3:bc:47:09:19:91:8c:
7c:2f:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:04 2026 by rpki-client