Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer
File: YmQpIWRWytXkhBRODGZqKZO5bck.cer (raw, json)
Hash identifier: qxPE9fTSKbBVSTPiIMVmMIPK83921iTNBFBN0PL+lJw=
Subject key identifier: 62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8267
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Sep 2026 13:32:56 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 204.86.136.0 -- 204.86.151.255
IP: 204.154.224.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33383 (0x8267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 17 13:32:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9128478, serialNumber=626429216456CAD5E484144E0C666A2993B96DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:24:6b:35:a2:6e:c0:8b:84:50:bd:93:73:
36:f2:7a:58:a3:f3:a9:b9:91:8d:a1:53:5c:f5:c9:
01:8a:2b:36:a7:f9:c4:28:e3:80:b0:b2:8a:0c:c6:
5c:3c:4f:df:74:cc:cf:eb:56:a7:5a:c3:06:66:25:
04:6d:70:6f:33:8f:39:2f:3a:4f:8d:59:47:78:29:
38:9f:7a:0f:da:e4:0f:cc:66:f4:a6:36:59:ea:1c:
9b:82:83:76:fa:7d:ae:77:33:92:80:ec:f8:c7:17:
a0:7a:f3:6e:29:ac:9f:18:95:3e:c7:1d:14:e0:6a:
0e:f9:f8:09:98:e5:bd:33:d0:b3:4e:90:dd:98:0f:
b7:cc:1f:64:6e:c9:8b:6e:ce:51:f1:8c:ec:9c:23:
c7:dd:47:e6:91:33:ff:96:ff:ad:a5:65:df:55:b1:
b3:81:89:df:99:b1:db:2a:80:0a:e9:32:48:b3:39:
2c:c6:b9:5b:d6:a3:14:6a:bf:c2:90:20:99:44:a5:
af:88:fa:71:d8:71:ac:70:c0:e5:dd:dc:fe:c9:0a:
2c:ac:5b:42:fe:0d:1f:b0:6f:85:23:a9:96:81:41:
4d:c1:2e:ab:29:cf:ac:43:24:c4:36:2d:c0:f8:a7:
03:c6:bd:6a:ca:66:49:bf:d4:9f:05:8c:6f:67:0e:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.86.136.0-204.86.151.255
204.154.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:c9:bc:e2:b2:44:fe:b7:0b:66:cf:4a:1f:43:5a:9f:a4:c7:
9c:e3:c6:62:77:94:72:63:96:ce:c9:c5:b5:59:95:90:eb:7e:
f1:e0:81:fc:df:8b:e9:4b:56:31:a5:a0:91:2c:18:37:ba:e5:
62:04:06:0e:4c:f1:65:8a:c0:8e:84:2d:f1:ba:b3:a6:ad:1a:
ef:77:7e:42:d8:8b:f0:bd:66:24:bd:8e:4e:7a:3c:b1:7f:ad:
31:96:68:22:d1:35:b5:82:61:3b:31:33:e8:25:26:40:e8:24:
bc:10:67:14:bb:30:46:06:53:a6:89:a2:f0:8a:ba:ad:13:30:
0c:8a:11:47:b9:5f:4a:00:32:8b:89:d1:08:22:e0:bd:9f:77:
01:2d:4d:d6:7e:8f:ec:02:d3:be:9f:4c:b7:69:ef:43:5d:57:
ea:01:76:15:ed:05:15:55:f1:17:45:21:c2:d5:c5:a7:e8:9b:
41:81:88:bd:72:5e:96:b6:d5:ec:a8:7a:a0:49:ea:0f:f8:77:
7f:35:14:b9:fd:0a:30:05:a7:25:cf:bd:94:6d:e2:00:24:3a:
2e:35:c4:9a:f4:a9:9b:b7:7c:a9:fc:5f:c5:4a:40:18:83:72:
13:80:dd:45:dc:df:e2:8b:32:c6:be:bb:47:df:11:5d:26:d2:
ad:a1:68:70
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIDAIJnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkxNzEzMzI1NloXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjg0NzgxMTAvBgNVBAUTKDYyNjQyOTIxNjQ1NkNBRDVFNDg0MTQ0
RTBDNjY2QTI5OTNCOTZEQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6vCRrNaJuwIuEUL2Tczbyelij86m5kY2hU1z1yQGKKzan+cQo44CwsooMxlw8
T990zM/rVqdawwZmJQRtcG8zjzkvOk+NWUd4KTifeg/a5A/MZvSmNlnqHJuCg3b6
fa53M5KA7PjHF6B6824prJ8YlT7HHRTgag75+AmY5b0z0LNOkN2YD7fMH2RuyYtu
zlHxjOycI8fdR+aRM/+W/62lZd9VsbOBid+ZsdsqgArpMkizOSzGuVvWoxRqv8KQ
IJlEpa+I+nHYcaxwwOXd3P7JCiysW0L+DR+wb4UjqZaBQU3BLqspz6xDJMQ2LcD4
pwPGvWrKZkm/1J8FjG9nDsPZAgMBAAGjggMBMIIC/TAdBgNVHQ4EFgQUYmQpIWRW
ytXkhBRODGZqKZO5bckwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4NDc4LzQ3RUE5NDFBQjI5QzExRjE5MzM5RUEzMTQwMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyODQ3OC80N0VBOTQxQUIyOUMxMUYxOTMzOUVBMzE0MDExRjk3MC9ZbVFwSVdS
V3l0WGtoQlJPREdacUtaTzViY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8EHjAc
MBoEAgABMBQwDAMEA8xWiAMEA8xWkAMEAsya4DANBgkqhkiG9w0BAQsFAAOCAQEA
osm84rJE/rcLZs9KH0Nan6THnOPGYneUcmOWzsnFtVmVkOt+8eCB/N+L6UtWMaWg
kSwYN7rlYgQGDkzxZYrAjoQt8bqzpq0a73d+QtiL8L1mJL2OTno8sX+tMZZoItE1
tYJhOzEz6CUmQOgkvBBnFLswRgZTpomi8Iq6rRMwDIoRR7lfSgAyi4nRCCLgvZ93
AS1N1n6P7ALTvp9Mt2nvQ11X6gF2Fe0FFVXxF0UhwtXFp+ibQYGIvXJelrbV7Kh6
oEnqD/h3fzUUuf0KMAWnJc+9lG3iACQ6LjXEmvSpm7d8qfxfxUpAGINyE4DdRdzf
4osyxr67R98RXSbSraFocA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:21 2026 by rpki-client