Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer (raw, json)
Hash identifier: Fw1WRpZ+EJE2TeS277DPDxhDWLmXqCSzfOugsLRP0fQ=
Subject key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 748F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:33:23 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.72.0/23
IP: 208.122.28.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29839 (0x748f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:33:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:1a:43:96:42:a4:9a:19:aa:54:90:66:e5:
73:16:32:6d:d3:ee:52:9c:6f:66:50:49:d2:a2:30:
c9:d4:1e:5b:94:20:7e:58:c0:73:1f:ce:00:80:d2:
62:f0:5a:97:86:03:4c:9a:dc:a7:86:14:56:81:0d:
11:0b:e7:bf:e0:6a:b4:f7:c7:92:ae:69:b3:03:ce:
bb:d9:00:04:b6:5d:08:a4:e4:82:19:9f:b2:cb:b2:
10:97:7d:5f:98:f1:89:d5:9d:2e:42:96:6f:8a:d3:
f4:40:24:7e:0b:8d:68:8c:2e:d4:cc:79:d0:fd:6b:
c4:36:7e:bd:0f:4c:4e:1f:4a:99:4c:f9:69:ad:a0:
38:0d:0f:61:d9:51:66:5c:fb:3a:52:35:f3:be:fd:
49:f0:14:4d:72:60:84:60:a6:6a:ba:fb:37:da:5e:
ec:a2:63:92:3e:e8:19:c0:d3:cc:5a:18:8a:0c:c8:
73:90:17:41:0f:45:2d:b2:33:f6:16:42:b7:70:6e:
df:51:35:7d:7a:32:25:ff:8e:39:e9:ec:12:f1:98:
a5:9f:42:59:5e:12:71:9b:65:7e:28:07:a7:08:d4:
4a:10:2e:89:1f:6c:ab:74:1f:a7:24:99:bc:1a:49:
b5:13:3b:95:1b:83:e9:55:41:a5:4b:58:36:c0:12:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.72.0/23
208.122.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:dc:06:88:72:d8:87:9c:f4:4a:a7:6e:b9:02:2d:09:5e:1d:
98:5a:7a:0b:a8:35:60:15:e9:9b:4a:41:18:0e:97:0d:bb:50:
0d:98:a6:f3:40:16:ca:43:cb:2d:64:63:35:e5:eb:8d:21:03:
5b:03:3f:13:b9:b2:6a:6a:60:77:d1:1d:c8:42:86:bd:40:34:
4d:8e:ec:45:77:62:05:ad:62:1f:d5:f2:01:4d:e8:12:0f:c5:
56:a9:bc:a2:aa:02:e1:58:d4:e9:e6:8e:49:b5:2e:33:d3:21:
14:d2:ba:cb:18:da:8d:6c:66:32:4c:f9:ac:06:d4:91:c6:45:
f8:a7:58:73:fd:13:b5:4c:2c:2a:e5:87:d1:09:53:09:f5:ba:
44:87:59:06:5b:d1:2f:70:95:bb:86:57:db:6a:07:f7:91:68:
77:52:9a:9a:df:db:f8:46:66:28:18:de:d6:47:11:ac:2a:62:
20:d7:90:7d:d2:03:56:b6:44:f0:e7:54:a1:d3:5b:44:a6:d4:
d3:2b:a6:d7:61:66:b2:15:45:47:11:e4:9f:46:a8:ce:d0:97:
e5:35:64:c4:57:d6:6b:32:05:7d:47:8c:74:59:19:1f:76:7d:
3d:82:4c:3f:e7:09:46:29:da:9b:15:53:f1:30:07:56:45:86:
a8:1b:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:51 2026 by rpki-client