Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
File: yq12WnMFvBUlSxWyW1vTm2Oow68.cer (raw, json)
Hash identifier: BykAbG3FDJKOBNuGNtzooJ3hEBRfut8BzNmf4UPIdN8=
Subject key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 814E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Aug 2026 12:20:59 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.103.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33102 (0x814e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 26 12:20:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:5c:70:94:ec:16:75:10:9e:28:c0:f5:f7:
4e:cc:c9:0c:39:56:f5:4b:b9:97:29:8a:ac:00:4a:
44:62:cd:5e:d3:2e:25:68:c7:06:62:24:be:44:bd:
b9:40:a8:37:9c:7d:32:00:bf:b9:f4:df:18:d4:56:
d8:be:08:58:4f:38:c5:07:a3:46:41:0d:a2:94:a1:
15:8c:ad:f3:5f:f3:f5:c5:4a:f1:d3:4d:00:b4:ce:
9f:e3:93:b6:d2:df:45:51:26:61:22:e0:fb:81:11:
b6:12:ce:1f:86:2d:28:02:f1:2e:4a:c3:32:2b:28:
d3:7b:9d:72:78:28:5c:ec:d8:db:4f:73:8a:42:24:
0a:09:2d:3e:6d:25:a6:a3:fc:7c:a7:af:c8:ca:73:
e6:4c:26:0f:53:46:6d:4a:50:ca:81:57:35:02:3d:
e8:93:f7:e2:0b:59:34:cd:54:61:c6:c2:79:07:7a:
43:42:b0:64:0d:ea:a0:56:ca:66:53:1a:e5:14:6b:
14:c7:25:f4:43:5f:76:be:d5:d9:ec:6b:17:54:64:
35:ea:25:bd:ec:a7:91:da:0f:d8:df:64:7a:18:09:
1d:ba:5c:4b:c0:88:a6:07:27:f5:e0:d5:90:e8:f2:
f6:ff:52:18:30:1c:63:b2:1f:80:cb:03:01:9d:77:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.103.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2a:6e:3e:60:88:26:46:f7:0c:b3:6a:2e:b7:ff:40:93:c0:
d5:41:c1:54:7a:ae:40:68:79:93:ab:5d:b7:ec:04:42:0e:7f:
43:30:e2:51:08:8e:20:8c:a4:4d:71:1e:a8:a2:8b:1a:e8:2d:
85:76:e7:05:52:eb:0d:ab:17:25:b0:9f:73:b7:a2:a3:49:6e:
9b:d2:f7:47:79:3b:02:11:dd:42:60:33:76:d3:16:90:b7:e0:
e1:4b:c4:3c:e5:65:3d:3f:2a:fa:e8:60:8a:13:58:4f:1b:de:
6d:52:12:bc:82:e4:2c:b8:6a:d1:29:95:7a:e1:6d:3c:c7:4b:
2f:5b:75:af:f3:3f:51:5b:ba:02:c3:9a:3c:d7:24:de:b0:30:
31:7a:0a:ff:79:26:ae:e8:78:a5:5f:e6:c8:b3:7e:9d:00:68:
de:af:81:fd:b6:aa:48:a6:22:d8:5c:be:fe:e4:43:7c:7b:f5:
3e:a5:49:3c:a5:f2:f8:f5:0a:7d:52:1c:74:59:87:42:24:d9:
7e:2d:71:e9:59:37:50:68:7c:02:bd:70:bc:a1:1e:71:f6:02:
78:81:ed:61:bc:38:fb:09:bd:0e:dc:cd:a7:4c:e7:3e:4e:0b:
a0:b1:50:7b:b5:6b:93:83:42:43:f7:c0:f5:f6:0f:73:1d:08:
d9:38:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:39:53 2026 by rpki-client