Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer
File: RyCit4x4I5km_e5zRKNoDaDYBx0.cer (raw, json)
Hash identifier: d0IYjTNLygtP+QP2dRz787UNAsvsy/nA0JpTo+GH73Y=
Subject key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 823E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 02:10:54 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.154.0/23
IP: 169.155.112.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33342 (0x823e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 15 02:10:54 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:50:f7:e0:88:c0:c9:5b:28:6a:35:45:69:
b8:07:1d:99:1b:ab:15:46:ce:e4:af:00:6f:70:b9:
d7:ce:40:62:1a:69:3d:79:6d:95:7b:b9:10:89:1e:
be:65:08:a5:0a:73:b7:e7:84:bb:d2:de:4b:6f:0e:
f2:bb:37:99:ab:52:e8:07:b5:f2:20:a8:dc:f5:5b:
df:e4:2a:b5:94:58:0d:70:09:d0:f3:dd:08:f5:ae:
63:57:f2:62:af:7e:44:c3:05:89:66:d2:d5:c7:53:
9b:46:18:db:43:c4:a1:01:d0:db:29:6d:05:b5:18:
02:5f:16:24:07:c2:15:7d:88:ba:df:f0:3d:a7:b5:
d0:68:0a:2e:59:86:6c:ad:e5:7f:6f:1e:ee:e6:ab:
f6:4a:0c:95:56:1c:80:b9:7a:07:af:7d:18:70:69:
4e:ee:ac:68:13:7f:3f:d9:c2:d8:e9:0a:3f:f6:14:
be:ca:d1:37:fb:94:3c:4e:8a:7e:56:f5:3a:0f:68:
01:a9:1c:4c:e3:c5:50:72:96:ff:0f:ff:f4:77:68:
5e:cd:32:98:6a:41:1a:de:99:34:a0:62:95:f0:4e:
7d:66:85:85:ee:1d:7f:c5:e2:78:12:86:f7:34:8d:
6b:98:74:54:93:7f:0c:1b:12:c2:89:52:cd:65:a4:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.154.0/23
169.155.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:32:64:55:0a:e7:ea:0a:12:1e:4a:59:42:c9:fb:c8:42:b2:
91:58:33:8f:3f:b8:3b:45:6d:30:f5:2a:4d:a6:7c:1e:53:24:
cc:1a:a7:32:cf:16:a4:35:64:fc:7e:48:a4:f9:48:29:a8:60:
6c:47:cc:7c:59:fd:f8:67:b8:9a:d7:3a:02:b9:6b:bb:29:f4:
46:f1:f8:04:ff:43:65:aa:ed:b0:f2:6f:e6:94:40:9a:d2:e0:
b9:08:8e:cf:6c:f9:5b:35:dd:74:a1:eb:c6:1e:13:bc:0d:f1:
1f:9b:16:b5:54:12:53:7c:5b:ce:a5:46:40:3f:d9:a6:07:2c:
69:ab:c2:95:33:8a:02:14:79:19:e7:15:c6:df:47:3f:da:07:
9e:62:1f:36:36:49:67:2f:21:95:3d:a6:57:02:0d:77:7a:a5:
85:66:48:60:b2:2b:83:b0:67:6d:c6:bf:d8:59:72:03:b0:a6:
e4:39:85:e3:30:fe:79:8e:e1:a3:2f:55:3c:73:b6:cf:61:95:
59:0a:5d:2f:e8:e3:38:da:c4:c3:f6:45:56:7b:84:ec:09:1c:
3d:f9:d5:39:5a:62:f8:4d:79:d6:26:09:67:b4:c1:ef:56:fb:
56:18:5b:9b:dd:66:69:26:e9:c8:51:07:82:49:bf:5a:c5:1e:
1e:48:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:45:53 2026 by rpki-client