Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer (raw, json)
Hash identifier: 4m8JFry5/PGjvhyIt4i2+IyRF8zhcRC4U5QlUJDpY10=
Subject key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 12:21:12 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.248.0.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33240 (0x81d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 12:21:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:ad:b0:1a:e1:56:00:3c:e3:ef:10:16:b2:
ba:1b:28:6f:de:76:27:dc:c8:2e:ab:53:28:f7:7f:
e8:6a:fc:7b:ae:0f:06:eb:f3:1c:19:d1:d4:1a:d9:
62:d7:ba:29:14:31:eb:63:44:f0:52:1e:de:8a:30:
f3:ca:99:db:37:15:46:55:93:58:5b:91:6b:cd:9c:
3d:ba:00:c7:cd:ab:ad:00:ed:4a:10:a9:c9:16:c8:
a3:09:66:97:87:09:f7:07:ad:00:d9:6a:c8:b6:2b:
58:87:29:bf:0e:87:ba:16:50:14:ac:cd:51:b8:79:
32:48:d1:63:c0:91:68:59:92:50:f5:fc:4c:6f:80:
62:b2:09:e3:89:d1:bd:d6:b2:13:be:01:6d:d7:bd:
fc:0c:52:84:9a:b8:6b:da:b1:ee:da:1e:66:a6:2f:
cd:23:4d:b5:c0:0f:c3:49:3c:25:0e:b5:cb:17:9a:
58:cc:2c:be:b6:8d:ef:69:d4:fe:c2:2e:87:81:7f:
35:26:e5:9c:67:7f:16:2c:c6:ef:5e:f2:8e:09:38:
8b:66:eb:b3:a4:43:da:aa:ea:52:1a:9a:62:0d:72:
e0:78:72:63:1c:45:e3:57:4a:60:a9:87:58:22:d4:
bc:fc:aa:b2:4f:77:e1:b6:a7:31:c6:d6:3f:72:b9:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.248.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:ea:a0:67:3f:dd:92:7b:17:4e:0a:64:3f:c1:40:c5:42:75:
ca:a2:80:c9:b0:43:93:cc:3f:0b:a4:c1:48:4e:30:3b:f0:43:
e1:aa:ee:0a:9c:ff:24:26:2d:09:19:52:07:17:29:03:30:02:
c3:e1:1f:b3:de:12:9d:5a:63:41:5c:2a:de:ee:ce:21:03:6a:
b2:0d:82:e6:e9:0f:06:a9:96:9f:b4:58:cb:ac:81:78:9d:6e:
e7:6b:50:67:67:71:fb:27:4b:ed:e9:d1:a3:b5:5f:bd:c0:b6:
71:a8:26:e8:1e:39:2f:08:b7:74:25:a7:ef:61:48:79:64:ee:
86:3b:65:dd:63:00:16:c4:48:b5:0e:1f:cd:8c:ba:d3:f6:0d:
62:4e:b9:fe:f8:0c:35:4c:e1:86:6c:8a:b9:89:f0:ca:1e:eb:
02:1f:3b:9e:32:36:64:7a:71:bd:da:cd:8f:af:0a:1d:cf:94:
8f:15:31:98:b8:d5:df:4d:65:6c:f0:88:81:ce:26:eb:41:89:
ff:89:d3:88:83:4a:99:e4:1e:e7:89:93:9a:64:20:22:78:9f:
ee:b2:77:54:0d:31:fa:95:2b:16:df:8a:ce:e1:30:c4:c3:55:
b0:71:a4:3a:e6:fd:a7:11:1a:98:62:44:3b:43:9c:74:68:cf:
ef:97:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:05:49 2026 by rpki-client