Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
File: yy5uwVWepHY5RAtAqtdfleb9vF8.cer (raw, json)
Hash identifier: yDutB6+kv5vE9MwLcyBfQqj2tU1K/wEGv1ua03b8nIk=
Subject key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 12:34:44 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 155.35.46.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33189 (0x81a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 1 12:34:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:10:07:f3:86:04:08:75:2e:ae:ea:a0:aa:
96:88:19:15:cd:5f:c6:df:5c:66:b6:d6:59:6c:73:
ad:fb:1d:9c:63:d0:27:32:91:f7:97:f9:e6:91:bd:
6c:e2:cf:e4:ef:0d:0b:50:1b:6a:ef:5a:66:14:41:
6c:88:05:67:7d:18:bc:12:f5:c1:51:f7:59:10:d7:
ce:d3:4f:ff:be:2e:0a:c2:97:01:01:47:f6:ec:de:
dc:7f:d6:f8:d1:34:19:91:b3:a5:5e:5a:b3:3c:8d:
3f:dd:68:55:6e:e8:4a:7c:99:32:0c:4c:19:51:98:
4c:e6:39:17:e3:6c:e0:18:98:bc:a9:2a:17:e8:cf:
6a:c5:5b:1d:92:86:0f:bc:dd:b8:25:f4:68:74:20:
aa:2a:9e:10:74:fb:c1:23:10:df:f1:8b:d1:37:19:
a0:da:e8:d4:a6:c1:57:5b:96:67:d4:e9:d3:1c:d1:
d3:09:db:e1:40:86:ec:d0:48:9f:89:4b:b2:de:51:
64:f2:02:25:08:88:2c:6c:7e:ba:d4:da:41:91:aa:
05:0c:88:29:a7:a5:cd:ad:cc:c6:21:f0:1a:e3:e5:
e1:ac:59:f2:b4:9f:37:1e:e6:23:98:9c:23:6d:34:
64:35:36:1e:4f:84:06:bd:17:46:30:68:68:f0:a6:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.35.46.0/23
Signature Algorithm: sha256WithRSAEncryption
98:26:2e:88:e0:e4:42:34:b6:63:01:e6:85:c5:fe:9a:29:c3:
20:33:a8:2a:d5:2b:e4:86:37:64:ca:bc:36:9e:91:d4:65:57:
20:ee:92:14:e3:d8:85:18:7c:42:77:04:7d:b8:bd:f3:0e:ef:
ab:7f:1d:80:bb:0d:40:f9:6e:15:ba:36:d8:5a:f1:9c:6a:48:
b3:b6:32:be:7b:bf:c0:2f:42:05:28:84:b4:ba:af:4d:e8:21:
ee:59:05:3d:1f:3b:8d:d4:9b:03:16:7c:ea:ba:7c:f2:9e:02:
ba:9b:d7:3e:ec:64:7a:10:bd:50:57:64:d5:65:c2:c7:d6:03:
e9:91:85:20:c4:00:56:9d:50:04:cc:31:0a:cd:7d:97:78:f8:
d2:88:86:aa:d2:9e:4c:93:01:2a:ad:d7:e8:64:af:5e:ec:31:
ba:b2:65:3c:84:8b:f6:52:7a:81:12:c1:5e:5b:97:98:1b:36:
27:37:6a:84:49:c7:3b:53:de:57:58:02:6b:df:d1:e4:45:9d:
77:93:ad:c5:0d:df:0e:24:04:49:47:8d:8b:83:66:80:71:83:
c5:2c:54:f3:c8:90:f3:99:5c:be:12:a2:1e:e9:b5:b4:a2:34:
e1:42:d6:b7:22:d1:ed:4f:c1:b1:7f:1b:ef:14:90:b6:1b:9a:
bf:b3:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:38 2026 by rpki-client