Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
File: YhmdhUkwna_yWfpPdr5svUb3VDA.cer (raw, json)
Hash identifier: flSLJL+0RGauW3JlczAoaLV25MnRuDW9HtxaR1V5yKY=
Subject key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.43.174.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30370 (0x76a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:0f:e3:72:46:cf:10:a2:f3:54:46:6d:68:
f6:2c:48:94:ac:00:de:ca:3c:f0:ac:a6:a8:36:31:
f7:b0:5a:4c:87:2f:6c:5c:ed:d5:72:fa:11:d6:54:
0b:dd:f0:9a:37:28:df:9b:8f:6f:73:64:44:13:94:
46:e0:65:85:5b:99:e1:94:1b:34:59:cc:49:c4:48:
86:c7:57:6a:25:83:53:29:f9:40:6a:1e:90:82:f8:
a7:24:3c:be:da:ac:51:12:32:12:7e:a6:09:e2:dd:
62:dc:28:17:71:61:b7:6e:29:09:d7:48:ad:d1:c3:
c6:65:1e:03:de:70:ea:3e:2f:82:00:0b:16:16:f4:
28:4a:d8:b0:6b:f3:5f:00:1a:69:45:bc:1b:f6:7a:
f5:43:b3:08:88:4d:3f:5f:ee:bb:65:7e:6a:aa:eb:
8f:5e:c6:18:e1:4b:9f:fd:cd:77:60:71:ce:95:b0:
1a:6f:d4:41:60:34:09:b8:85:df:c1:ec:90:f1:14:
7b:88:66:5e:d9:9a:67:ac:60:46:28:5a:51:56:b1:
b7:7c:b1:fe:85:69:2f:78:e2:91:c0:a3:0a:17:e8:
6f:c6:1a:4e:31:90:59:4f:e2:7a:c4:38:87:f3:a0:
b3:4d:aa:fd:9b:45:a7:1f:91:23:8e:43:51:8f:69:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.43.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:83:c4:06:a5:fb:61:89:8f:91:7c:74:57:3e:ab:19:3c:ac:
bd:60:ce:dd:89:5d:b7:71:9c:b6:d7:a1:c8:92:af:02:cf:40:
4d:b7:57:10:6e:10:40:7c:1e:50:7b:52:97:6b:12:2b:57:fa:
ce:11:e2:62:b4:9d:ca:9b:9c:c1:e0:e3:c0:0a:e4:d5:7a:f2:
d4:d7:41:ee:33:fa:eb:b3:fe:ed:2c:eb:82:24:f6:bd:fe:71:
5c:25:79:3c:37:c5:5f:56:4d:81:94:52:06:df:3f:95:dd:10:
67:8a:c6:99:65:ef:81:eb:d4:db:89:25:f6:5d:50:6a:36:e5:
35:15:9d:8e:1e:a9:ff:cc:b4:df:43:cf:59:97:68:d8:fd:b8:
da:14:15:85:34:62:96:6d:82:27:b4:bb:18:03:6a:b2:78:77:
22:f0:16:73:f8:4b:3b:73:e5:e7:54:fd:4f:6b:7e:59:10:bc:
6b:dc:dd:a7:63:2f:76:a8:1d:09:83:6a:c2:cf:25:50:72:27:
46:40:73:ab:87:4e:4a:bc:f8:69:00:72:9e:3c:54:7e:ce:76:
ff:43:e7:ca:c5:a5:89:91:e1:25:09:15:9d:74:aa:5c:49:45:
99:06:89:cc:b1:41:78:61:38:85:62:19:f7:9e:7d:1b:5b:8c:
55:9e:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:54 2026 by rpki-client