
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
File: _YASv-mRKe-ci7ekYDIUQvbSZWI.cer (raw, json)
Hash identifier: WeGFBHbcj1EbxuNQkX6NVvPIhjLezZSGCKYl8jmH5to=
Subject key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Sep 2026 13:12:25 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33252 (0x81e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 4 13:12:25 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:bc:38:6d:d2:ba:3a:f2:a9:65:1b:a0:da:
e3:87:a5:5e:bb:e9:f8:8a:64:7f:e9:d8:19:8f:ef:
c0:42:cb:1e:3e:9c:f5:b6:46:d2:b6:ac:73:46:d8:
2b:cc:c9:eb:87:fd:bc:28:08:d9:10:55:6b:31:f8:
04:0c:0a:51:16:7b:2b:c7:86:56:93:1f:d8:ce:ec:
ce:95:ac:eb:76:c5:1e:fa:7d:f8:ad:af:7b:42:e5:
b7:56:a2:85:8d:fc:3f:46:af:fe:dd:91:8d:ec:af:
c3:30:2d:ac:a2:ca:4d:ce:51:98:b4:4f:1c:b9:8b:
32:d2:18:cd:2a:11:76:9d:58:1f:62:28:f7:87:eb:
4a:ee:11:cb:ee:af:6b:ac:7f:8b:a4:dd:82:ae:bb:
d1:9b:aa:9e:11:d2:84:0c:0a:39:fb:05:27:8c:ee:
3d:ea:86:30:bb:35:21:22:2c:b6:12:f7:f7:cf:63:
d2:86:a9:4a:56:27:70:b8:8b:85:49:c1:71:32:cd:
be:6a:6c:4b:2d:62:54:0d:b3:cc:50:3b:60:35:7c:
6f:5e:de:36:06:43:eb:e6:af:3b:eb:18:1d:2f:e3:
c4:18:7e:fe:cc:3c:c5:74:d5:d7:91:10:ff:b7:ea:
38:a7:52:77:55:ca:37:44:93:92:a4:b4:87:8d:63:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.128.0/23
Signature Algorithm: sha256WithRSAEncryption
39:74:07:a4:6f:1c:fd:5d:a1:3f:c6:b7:11:9b:03:2d:c1:09:
ed:23:54:2b:e3:8f:02:8e:c9:44:20:0d:3f:78:07:6c:0f:aa:
c1:29:ce:d9:10:d7:6a:66:0a:06:e2:aa:99:33:74:ea:0e:3f:
ea:82:eb:fb:f1:2b:71:34:5f:6a:1b:f5:76:ba:8d:4a:85:4e:
1d:f4:a9:31:05:15:4d:11:39:ee:bf:66:9e:72:58:4e:e1:31:
34:6d:9b:07:fd:eb:b1:78:98:64:62:a9:2e:28:8b:71:7c:26:
ca:ef:0f:57:ad:b2:9a:27:38:74:10:e7:3a:62:59:f2:cc:07:
4a:f4:07:6d:3c:8c:d3:3a:8b:29:e6:8f:71:e5:08:e9:fe:92:
b1:19:75:af:f1:29:6c:03:f7:a2:e0:4d:26:36:3a:df:9c:f0:
90:44:8c:51:97:ee:00:9c:0e:16:75:0c:36:5b:7b:d3:75:68:
5b:0e:a5:97:d3:21:41:86:f6:a4:57:c0:8d:47:96:8a:ff:59:
90:0a:f1:94:54:b5:e1:c8:ff:84:7b:91:75:02:5e:cd:85:f8:
9b:e2:9a:3d:12:ad:93:0d:07:5e:62:5a:17:b3:4e:ac:36:d3:
82:48:20:b6:46:06:d2:f4:8f:5a:a5:80:7c:79:61:05:c9:3e:
3b:91:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:02:39 2026 by rpki-client