Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
File: y4244fF7x3I0bdn_uyByz6j9plI.cer (raw, json)
Hash identifier: QnhJJc2UxECx1KXY1RPw6d7CQpI48h/sVAR/dFEs5s8=
Subject key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7504
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:48:47 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.211.0.0/16
IP: 165.84.32.0/20
IP: 165.84.64.0/18
IP: 192.203.99.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29956 (0x7504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:48:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:36:e0:7b:48:d5:b9:81:27:4c:be:69:6d:
dd:a5:bd:99:cb:d5:cc:27:d7:28:a1:37:9f:30:68:
d3:52:b5:62:17:e2:8e:a5:14:49:1d:86:ef:68:ab:
f4:12:f6:95:6d:c1:02:c3:ab:a5:2a:18:d1:73:31:
56:17:38:40:40:ea:d0:e9:ad:71:15:f1:87:cb:ca:
0c:34:6a:e8:ad:65:4d:5b:9c:e3:a3:f6:87:6c:09:
d5:e1:a2:7f:4c:28:db:c4:01:61:89:33:ca:4d:5b:
fd:36:d1:52:6e:f9:4e:b4:8e:82:c0:73:a7:55:4f:
d1:be:e6:40:fb:a5:a9:33:e8:71:fa:2f:18:5b:0d:
ad:a3:24:66:3d:97:2d:e5:b4:0d:7d:73:5d:0b:32:
d8:d1:46:59:8d:49:e1:14:d0:5f:69:60:71:ed:aa:
7b:95:b3:d0:0f:4f:54:40:1d:7f:3e:b0:95:25:b5:
c8:9b:d3:38:bc:02:dd:71:5c:e1:8c:28:23:3c:9f:
2b:9e:3e:58:8e:a5:b9:6b:00:dd:43:23:77:4d:3e:
21:0c:7a:cb:ea:29:d5:53:94:76:54:d0:80:20:cd:
de:d3:75:4e:ac:c3:67:5b:3a:27:30:6f:ff:9c:b0:
83:b0:42:ca:22:b8:fb:0e:14:ec:00:a7:0e:eb:ba:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.211.0.0/16
165.84.32.0/20
165.84.64.0/18
192.203.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3a:a3:36:0c:07:a1:95:30:98:b9:dd:91:17:27:ec:dc:69:
1d:d8:14:0f:dc:74:e1:8e:6f:6a:e9:35:3d:3c:28:86:da:23:
70:19:2d:8f:1d:b7:26:83:42:ed:1a:a4:74:77:8b:8f:57:a2:
df:43:c7:93:5b:d9:fc:e6:64:6b:6d:2b:e6:7c:ab:9c:61:26:
e8:c1:98:bf:18:3e:7a:ff:4a:93:c5:1f:de:80:74:b1:19:22:
ba:30:d2:91:98:76:14:b5:3c:bc:7b:16:16:ce:fa:48:ff:5d:
75:e6:d0:0c:79:b7:31:7d:31:b0:0f:28:3d:d9:3a:0b:e3:a9:
38:ef:ce:db:ec:28:97:fc:a3:58:d3:b9:7e:0b:48:da:db:5d:
e4:c8:1e:54:0a:d6:b5:84:c1:41:6a:67:b4:cf:08:30:20:44:
f3:6d:1c:74:9b:cb:f7:99:7b:a3:61:29:ca:78:ae:24:94:21:
6d:f0:ff:1b:2f:0c:50:74:8e:76:8d:b2:1a:06:5a:45:fc:cb:
f0:b5:3c:11:29:eb:c0:df:a5:b8:bc:96:6c:70:2c:ad:9e:a9:
6d:ad:92:b5:66:6b:cd:83:a3:8a:58:f4:33:f6:ac:e4:cc:03:
c8:95:3b:43:29:11:18:8e:ac:0e:03:46:12:a7:45:3c:08:e0:
56:1f:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:37 2026 by rpki-client