Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
File: rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer (raw, json)
Hash identifier: SGJFNcDtjdq/rZTiAchEa9jT2L6ED5VXExFjI2FdwXU=
Subject key identifier: AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 821D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Sep 2026 02:36:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33309 (0x821d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 10 02:36:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918E84C, serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:ba:d7:ae:cd:32:b5:e6:7a:ac:8a:d5:af:
b5:ea:4f:1a:e0:e3:79:98:7a:71:a1:dd:27:f8:fe:
27:68:3e:04:26:83:cb:df:48:6a:7f:4f:ee:db:fc:
a5:b0:96:76:aa:74:d9:84:61:9b:81:6f:ef:1c:57:
3b:f9:84:92:d6:fb:e3:b7:4f:b4:0b:58:a0:5e:90:
47:e8:b4:ec:6e:a7:3f:b1:d5:23:1d:aa:36:af:e3:
da:21:88:48:0d:8d:e3:12:16:30:45:e9:75:cf:9a:
19:f9:0e:0b:30:40:a9:ee:ec:f5:5e:c5:07:77:64:
9b:53:16:6f:c1:6b:f5:56:ea:0d:67:e9:be:51:db:
a5:93:e3:cf:b2:00:42:2a:0a:43:cd:63:a9:db:69:
2f:51:1d:d0:2c:ca:77:bc:23:c7:26:b6:31:45:6d:
a9:49:73:88:7d:eb:8e:95:6c:06:c6:49:d7:08:82:
d7:11:51:d4:10:c2:c9:18:fd:3f:2a:19:38:06:05:
39:a3:38:ac:c1:a7:c5:36:47:c9:6d:e0:90:f8:93:
d7:6c:6c:0e:bd:50:9b:fe:de:c8:27:f6:2d:8c:ed:
60:a3:19:15:92:e8:e7:4e:0f:0d:a8:d9:50:27:8c:
a1:0f:ed:7e:86:54:51:a7:f2:81:da:3b:3d:1b:c1:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.86.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:bb:36:67:75:32:67:83:a0:71:fd:0c:cd:34:73:e0:a4:24:
c2:08:31:13:16:93:16:a1:46:cc:5a:2e:3c:ee:b0:8f:84:00:
4e:ce:b0:68:de:ea:a6:64:e0:ff:82:b1:7a:31:fc:3b:b7:b0:
dd:f4:76:33:9c:01:0a:7b:7f:f5:b9:c2:17:09:32:08:e6:a0:
74:96:f2:fe:3f:86:d9:5f:a0:3c:00:14:a7:63:4c:e7:05:73:
2a:0f:4d:d7:30:5b:c9:2f:82:41:90:a8:d5:ea:cd:5c:c2:79:
16:9e:15:79:61:22:e5:98:2f:5b:9c:65:7f:c8:93:23:e6:14:
17:79:bb:62:06:81:82:10:77:65:2b:37:07:be:90:08:03:b7:
05:51:29:1d:f8:fb:a1:5b:cc:42:d8:82:4f:49:23:4d:4a:a0:
00:8c:13:81:4e:c0:98:2f:05:b4:30:55:c0:2c:97:0b:4a:a5:
d2:12:1d:cb:c5:07:d3:30:a4:73:0a:76:65:e6:b4:8c:01:a0:
98:22:76:0c:ec:74:39:d7:e0:d7:9e:12:7e:76:c6:55:31:20:
2b:50:ba:23:4c:46:18:27:dc:28:56:7a:5f:ff:16:55:b3:54:
14:1a:85:39:13:53:8d:bb:11:b6:36:29:62:0c:98:34:58:1b:
c8:d3:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:06 2026 by rpki-client