Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
File: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer (raw, json)
Hash identifier: y5ZxV8GqyU8RaRALkMo/kU42UCCL8V64E81hJIGSL5M=
Subject key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CB0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jun 2026 08:03:46 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.216.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31920 (0x7cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 9 08:03:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:c5:e0:79:8a:dd:3c:74:f9:5b:0d:8e:8c:
cd:fc:32:df:05:85:1f:67:86:24:25:db:85:0d:b3:
b6:21:59:7f:ac:a5:07:91:cd:04:df:6e:00:5c:b6:
7b:9d:1c:81:67:f7:65:1d:58:f1:df:be:32:a0:c9:
56:47:c6:78:c7:ed:74:62:74:c0:9f:d3:d7:6a:dc:
88:8d:eb:57:ca:4c:9e:57:df:2e:c6:94:85:cd:4b:
4c:e2:93:73:35:5e:40:20:86:22:d2:2b:41:50:46:
2e:bc:ef:85:14:48:48:97:7b:7c:e9:dc:46:ac:13:
6e:30:76:af:f1:8a:24:db:38:64:75:dd:14:17:ad:
01:b5:aa:7d:70:aa:b0:2c:50:f5:d4:d8:e8:88:b0:
78:9a:45:b4:d0:a9:5e:48:fe:8d:03:8d:cb:47:f5:
92:25:9f:19:d3:37:64:aa:bf:37:fd:29:28:63:ee:
50:e6:0a:22:f5:d1:fc:29:f3:15:c9:f7:b6:c2:5a:
e4:aa:a2:b9:04:b8:fa:3a:33:3c:0f:39:c0:25:07:
76:14:0e:27:be:20:d0:c0:13:0c:ae:43:b5:44:73:
a0:1b:88:2e:3b:99:10:02:41:a8:4a:df:b6:a7:54:
26:9d:49:01:56:23:8c:a7:43:12:aa:ce:91:b3:be:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.216.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b5:91:9b:5f:bf:db:1c:13:e1:1a:ef:75:de:3a:21:90:b2:
70:b3:92:2d:7d:9a:1b:5d:96:57:fe:0f:36:63:aa:a1:f8:7c:
70:7c:c7:eb:1d:84:2b:5c:47:2a:8d:fa:12:c8:54:9d:52:7c:
eb:94:c8:61:aa:72:10:25:39:ad:1b:11:0e:4b:5d:11:84:a4:
59:e0:67:57:85:2f:4e:dc:39:8a:ad:7d:2d:3e:66:51:ff:51:
4e:d9:dd:d1:39:5a:e0:3c:5b:63:bf:23:6f:0f:ee:36:eb:04:
6e:dd:b5:2e:f5:59:de:d6:99:20:8e:de:ed:f9:0e:21:8f:d4:
85:65:6f:21:b3:69:b2:a4:53:c0:0e:0c:f3:a8:23:ab:b4:d8:
21:97:1d:f1:63:78:b6:16:69:66:fe:4a:d3:00:f3:54:d3:e0:
01:c6:8d:58:76:fa:0d:7d:56:0e:d4:68:75:72:8c:49:30:38:
75:09:cb:c4:75:c6:d9:fb:0e:64:ed:22:c9:1e:34:55:e0:f0:
52:0b:ab:b7:7b:f3:1a:36:31:76:32:5d:44:5f:1b:2a:c8:e0:
f4:c0:36:ac:76:14:a8:d7:30:f4:6f:bc:90:68:dc:89:3f:74:
65:64:3c:5a:1b:f1:ce:21:58:7c:d3:1a:18:df:4e:79:f4:b8:
3a:cb:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:44:27 2026 by rpki-client