
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
File: yNpkCWcTSBB928ixg_VavykxJVY.cer (raw, json)
Hash identifier: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=
Subject key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 May 2026 12:33:04 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19312 (0x4b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: May 27 12:33:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:2b:4f:6f:0f:c3:e3:93:ff:0c:56:c9:48:
68:64:ae:2b:40:a3:71:68:5b:d2:5b:e8:18:67:27:
3d:ae:81:63:39:35:dd:57:bb:e9:ca:73:8e:d5:c2:
ba:d3:ad:1c:7b:10:fe:b3:59:06:b1:4e:0b:b1:ee:
2a:89:fe:bc:02:f3:45:c4:ed:58:a2:17:ec:d9:15:
4f:73:66:f6:a0:68:41:1b:e2:a1:e9:49:5f:ab:bd:
13:83:51:f8:2c:1e:54:04:1b:e1:67:13:fd:fb:30:
a6:bd:78:67:4b:5a:2d:cc:52:e5:57:2f:9e:49:8c:
f8:43:fd:9a:0e:a6:47:82:0a:41:b6:e2:50:ed:67:
96:30:81:f6:44:b0:80:c6:09:f3:15:c0:f0:e8:ab:
fe:8a:0f:cc:d0:bb:3c:da:78:71:25:68:f2:40:36:
e2:a1:3f:ed:50:40:a2:32:96:6c:e5:f4:fe:63:f7:
19:4a:a6:91:4c:2c:7f:1c:3a:92:88:ea:68:ea:3b:
a1:85:ea:82:0a:8f:3f:8f:bb:33:83:d8:3e:c7:0d:
fc:4b:60:98:d4:41:68:a3:4c:8d:d6:98:8e:fa:d9:
a5:43:39:c9:82:90:c8:19:c6:8c:38:86:84:8e:a9:
36:47:5a:3f:2b:0e:9e:2c:d1:31:d9:38:90:e1:fa:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.128.0/17
Signature Algorithm: sha256WithRSAEncryption
25:de:53:fa:70:67:ab:0d:67:49:bf:ea:c8:c5:3a:07:70:59:
21:bd:b9:26:7c:94:90:b7:35:a7:61:96:ce:4f:ed:de:e1:77:
1d:24:49:fa:34:3d:a8:97:d3:b8:0d:2a:d0:ad:04:70:b0:95:
bf:0d:e3:42:2a:1c:98:f4:d7:8c:f9:51:17:c6:4d:65:e1:5c:
11:ac:db:6b:ca:fc:12:de:93:bb:00:a5:6c:03:d6:0e:1f:d1:
4d:36:ad:dd:f0:8b:24:84:fa:46:73:da:ad:09:6a:c7:19:72:
8d:2c:5f:17:d8:0d:15:eb:3f:f3:90:bc:f6:00:a6:0a:cc:f4:
c4:e9:62:2a:26:fe:2e:21:74:d9:08:2f:56:12:21:fd:86:b9:
b1:30:58:89:58:1b:53:ce:e2:68:7a:69:d9:68:f6:cb:4e:51:
33:ad:d0:7e:67:32:64:7a:d1:84:a9:13:cc:95:2f:05:9c:e1:
4b:06:02:04:d6:72:64:a1:4a:e1:38:de:b7:6e:89:f8:6c:24:
0f:54:70:a2:0c:28:dc:9d:60:27:75:c1:78:c0:40:ca:d8:11:
a7:dd:eb:c7:2b:d6:31:aa:14:ff:41:c2:95:b1:bf:88:fd:a3:
c1:7f:c5:3e:08:70:9f:70:20:02:66:b1:47:72:b3:4b:58:f9:
df:99:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:29 2026 by rpki-client