Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.cer (raw, json)
Hash identifier: eHn7aU50PmHovS8s655GsGQbZhpjq/79NdHhxNS8lz4=
Subject key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7668
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:15 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 137.109.0.0/16
IP: 152.91.0.0/16
IP: 192.58.133.0 -- 192.58.136.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30312 (0x7668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:a5:65:cc:35:cc:2a:46:27:29:02:d5:0d:
85:e7:7a:a4:09:02:71:7e:ee:a5:d0:be:c3:12:1c:
92:3e:c9:f0:83:cb:cb:4a:e0:e0:bf:4f:14:ac:4c:
a4:2a:f9:42:b0:09:1f:d8:53:00:83:87:8f:ab:f4:
a6:8a:44:01:d7:ba:00:09:25:f1:4f:a2:93:2d:e4:
a4:74:eb:ed:1a:fa:5b:84:16:df:3b:6f:78:68:86:
75:14:c2:ad:5b:c8:59:a7:4f:5c:ad:fc:22:bd:c2:
01:1c:c4:72:37:1a:f5:18:12:5a:c2:4a:c9:ed:10:
fe:5c:53:8c:e6:55:a5:68:02:4f:24:8c:5f:8a:54:
da:cb:eb:c5:8f:b7:36:7e:a6:fb:24:54:de:82:73:
c0:c0:c0:65:c5:b7:18:03:44:5d:e7:be:05:29:31:
17:bc:9b:3c:20:60:8c:00:49:b7:7e:43:bd:75:34:
60:be:ff:24:f3:cb:e9:b7:77:8f:45:70:8d:71:57:
95:f7:3e:ba:76:7f:7d:e9:7a:49:8a:8c:20:50:94:
e2:36:c9:86:29:4a:17:75:2b:c0:90:1c:cb:5b:8a:
ec:ec:b4:0f:86:c2:3a:be:3b:e5:b0:d2:e7:85:df:
25:bd:33:fd:eb:a7:9c:f2:3c:7b:ca:3f:bc:c7:f2:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.109.0.0/16
152.91.0.0/16
192.58.133.0-192.58.136.255
Signature Algorithm: sha256WithRSAEncryption
08:90:82:bd:dd:5f:6e:00:7b:a7:20:d8:51:d0:ce:e5:6f:c0:
31:2c:47:0e:88:a4:b5:c8:50:cb:1c:f6:4d:a6:74:b3:83:87:
7b:89:0d:ea:c1:14:ee:f2:66:72:fc:02:d8:74:bb:27:c8:53:
c1:fc:ef:5b:04:76:f9:a2:9a:47:d6:5c:e6:c5:af:35:2a:65:
c3:48:a6:11:88:21:34:c0:6c:0a:fc:e6:c3:ad:82:af:a8:c8:
ca:6d:b0:42:ed:8c:65:ab:9a:ff:de:5a:91:ed:ca:4b:83:93:
74:cf:7d:3d:ff:88:f1:e8:83:d9:42:61:7a:f9:7b:55:1d:2a:
88:9d:0b:3c:ce:fe:ed:55:d6:49:26:a7:13:11:45:2d:b6:71:
60:8a:0a:e1:aa:66:68:91:21:88:66:9b:bd:89:ba:e4:6d:62:
22:d5:a7:98:7b:1b:2d:7f:8c:b5:b5:6f:22:c9:a5:53:eb:95:
ab:b5:db:f2:c4:d9:7f:36:73:66:06:20:fd:88:8b:ac:34:16:
d4:96:f5:63:f2:48:2a:77:7e:70:12:db:1c:9f:3f:6b:54:ee:
61:46:1e:14:7c:2d:ee:27:ee:7b:c6:a9:bc:ea:a9:6e:29:91:
a6:aa:d3:b3:7c:4a:5f:92:d7:26:d1:60:37:43:dd:d9:7c:ff:
c9:6b:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:23 2026 by rpki-client