Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
File: TYBwR6bhsNMLr2Qme_lSJIr906k.cer (raw, json)
Hash identifier: dwLVberY8tDe8SNZ2kLUt8ruDP51zI26pSgLA7PPDbM=
Subject key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7601
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:54:09 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.246.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30209 (0x7601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:54:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:a2:7e:a6:ed:87:ec:1d:dd:25:77:ca:18:
ce:80:ce:ae:56:74:ad:57:c3:67:cf:a3:ed:37:5b:
c0:f2:1c:a1:fd:f7:79:bf:2a:30:49:2d:f3:0a:fc:
dc:36:03:c7:f2:27:6a:35:5a:4e:54:dc:68:b7:ea:
43:68:b7:f9:05:76:a6:80:62:6c:05:d7:3a:37:bc:
a0:5f:f8:36:28:cc:c2:fa:bc:99:6a:7e:dc:e4:c1:
33:30:16:b2:7b:28:73:cc:1d:04:41:56:9c:0a:59:
90:31:5d:00:15:05:ab:54:6f:78:30:1e:c6:08:d5:
f2:42:d6:c6:2b:b8:bd:86:8b:19:30:44:82:f6:57:
76:fc:91:e3:64:f1:f6:2e:52:f3:7a:94:83:7f:fe:
dc:ee:98:28:49:1b:71:f5:45:13:85:07:37:7b:58:
70:d8:23:42:e0:d5:39:81:80:36:3f:83:29:95:a5:
48:22:f4:0f:07:e0:4e:94:e7:c8:07:a0:2d:ce:43:
8c:77:8d:88:b8:c6:7d:02:0c:32:13:05:bf:af:e3:
19:d7:87:4c:d1:a9:ea:96:df:5a:c9:ac:b7:98:47:
55:db:40:7f:55:23:d5:8c:04:a9:fc:b1:2d:0c:5b:
97:a5:87:38:5c:a2:11:73:92:eb:a0:f4:1a:2b:34:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:e0:4b:f7:aa:79:cc:0b:02:e7:30:4b:bf:41:f5:cd:a5:1e:
c5:b7:ed:bb:b5:16:c5:e5:7d:f3:29:db:ca:a2:1f:2f:26:80:
90:e0:f5:6f:df:5e:be:1e:43:64:15:be:e4:74:55:54:fe:19:
ef:65:38:40:52:a4:9e:10:da:91:40:c5:70:6d:9d:af:ee:0a:
55:f3:d1:d1:d4:08:bf:a1:5a:f2:62:0d:99:72:f0:35:35:58:
4a:1b:a9:68:40:fb:d1:04:28:4a:da:03:cb:c0:a0:fa:84:75:
87:ac:8f:a4:5d:5e:1b:85:a6:83:1f:90:39:25:c7:07:2e:84:
4d:43:dd:f2:62:f2:42:3e:ee:90:ba:26:d9:c2:64:21:5c:03:
fe:3c:7c:bd:8a:92:16:16:80:9e:e1:d5:d0:50:4f:9e:f1:bd:
d0:6c:07:7e:5f:ed:ae:92:c6:74:14:72:2a:7f:32:1c:87:82:
df:9a:ba:9f:c0:77:7a:94:33:86:2d:a5:fe:f1:b4:e3:07:85:
28:5b:3e:c1:43:d9:aa:97:a1:83:f4:d0:eb:47:96:03:0c:d1:
96:b5:82:b4:d0:3d:4a:20:4a:8a:36:fe:a0:3f:f1:04:42:22:
9b:84:ae:cc:5a:50:fe:5c:90:9b:aa:cf:c8:38:ee:ab:60:8f:
26:9f:05:ff
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NDA5WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGN0Q1RTExMC8GA1UEBRMoNEQ4MDcwNDdBNkUxQjBEMzBCQUY2NDI2
N0JGOTUyMjQ4QUZERDNBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKEpon6m7YfsHd0ld8oYzoDOrlZ0rVfDZ8+j7TdbwPIcof33eb8qMEkt8wr83DYD
x/InajVaTlTcaLfqQ2i3+QV2poBibAXXOje8oF/4NijMwvq8mWp+3OTBMzAWsnso
c8wdBEFWnApZkDFdABUFq1RveDAexgjV8kLWxiu4vYaLGTBEgvZXdvyR42Tx9i5S
83qUg3/+3O6YKEkbcfVFE4UHN3tYcNgjQuDVOYGANj+DKZWlSCL0DwfgTpTnyAeg
Lc5DjHeNiLjGfQIMMhMFv6/jGdeHTNGp6pbfWsmst5hHVdtAf1Uj1YwEqfyxLQxb
l6WHOFyiEXOS66D0Gis0tzcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRNgHBHpuGw
0wuvZCZ7+VIkiv3TqTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjdENUUvMEZCNjI2MDZGMjAxMTFGMEFENDE4Q0JBNDg2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY3RDVFLzBGQjYyNjA2RjIwMTExRjBBRDQxOENCQTQ4NkY1NkJDL1RZQndSNmJo
c05NTHIyUW1lX2xTSklyOTA2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBP9jANBgkqhkiG9w0BAQsFAAOCAQEAouBL96p5zAsC5zBLv0H1
zaUexbftu7UWxeV98ynbyqIfLyaAkOD1b99evh5DZBW+5HRVVP4Z72U4QFKknhDa
kUDFcG2dr+4KVfPR0dQIv6Fa8mINmXLwNTVYShupaED70QQoStoDy8Cg+oR1h6yP
pF1eG4Wmgx+QOSXHBy6ETUPd8mLyQj7ukLom2cJkIVwD/jx8vYqSFhaAnuHV0FBP
nvG90GwHfl/trpLGdBRyKn8yHIeC35q6n8B3epQzhi2l/vG04weFKFs+wUPZqpeh
g/TQ60eWAwzRlrWCtNA9SiBKijb+oD/xBEIim4SuzFpQ/lyQm6rPyDjuq2CPJp8F
/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:40 2026 by rpki-client