Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
File: -rY3Nmo7_ydyaOS_NFMMq86RvOY.cer (raw, json)
Hash identifier: 350eZnvSDtm1tgceqdIGr9Fn7WvBsvLYe71MmMyBc8o=
Subject key identifier: FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E4CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Nov 2026 09:32:33 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 136896
IP: 2402:7a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189646 (0x2e4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 09:32:33 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9154F63, serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:c5:1b:af:e6:e0:fb:6b:8d:eb:5a:fc:e3:
65:3b:8b:39:b2:ec:11:ba:67:da:88:f7:97:10:15:
12:cf:b5:21:cc:1a:3f:1d:82:2a:b5:c5:88:b7:ca:
5c:3d:21:f0:64:c2:39:f9:01:cf:33:74:c1:d4:e9:
29:67:7a:16:30:13:47:6c:05:12:77:6d:2d:99:ed:
86:13:f1:43:8f:50:3c:25:27:84:90:04:7a:2b:57:
e1:e5:78:18:fd:27:a8:47:64:f5:63:4b:d7:7a:b0:
52:87:51:95:13:07:48:07:a2:b9:36:47:af:f7:4a:
7a:ec:39:b9:de:a6:ab:2e:4c:de:93:b7:20:ce:68:
8f:f8:27:05:77:37:e9:35:ec:fc:89:e3:d4:52:28:
51:7b:80:5b:11:20:de:e5:c1:8c:e5:97:92:b0:93:
8c:37:3e:5e:b2:eb:e3:9a:6f:e0:bb:00:d8:da:f3:
9e:ec:10:b6:64:00:38:81:5d:75:fe:af:7d:7c:8b:
5c:6d:db:e7:5d:5f:8c:05:f6:e0:c6:db:de:09:3e:
2f:cd:01:b3:b7:df:50:00:44:2b:e9:3c:ca:cf:66:
c4:a8:56:83:31:bd:b4:82:ad:03:ad:3a:83:aa:c4:
78:3a:60:96:7a:76:9e:de:54:e2:da:98:40:28:94:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136896
sbgp-ipAddrBlock: critical
IPv6:
2402:7a60::/32
Signature Algorithm: sha256WithRSAEncryption
1a:ee:13:40:a4:d5:6b:05:b4:b2:67:6e:02:f0:c4:1e:db:69:
14:c7:54:6a:68:08:da:a6:e7:96:4d:40:ce:86:63:3a:26:49:
10:ce:df:ec:00:7e:1b:24:7f:a7:dd:ab:82:b3:0c:fc:79:ee:
8d:0a:de:a8:a4:94:e1:a1:77:03:ea:16:1a:13:23:6b:f6:d2:
ce:ef:57:1b:ef:76:c1:1a:93:b9:46:86:c7:ac:89:4f:cb:b9:
73:b6:c8:2a:58:dc:f7:c5:4d:67:1d:c9:55:b9:91:89:79:8b:
7c:51:b1:e2:74:b4:27:ab:34:48:20:41:c6:cc:f6:44:32:21:
3b:12:0e:bc:94:2c:cf:bf:96:f7:0a:f5:09:1d:6b:df:fa:47:
59:fd:60:c6:77:c6:21:14:7b:f6:e2:72:b0:90:de:2f:59:3b:
b0:dc:e8:71:49:cc:b6:a3:7d:57:3a:1b:5a:5b:39:53:6f:92:
ec:43:4e:29:46:9b:8d:9d:49:32:66:11:d4:bb:de:1c:7c:61:
f5:7c:c3:cd:28:f6:b8:05:87:08:5f:26:96:78:96:01:2e:39:
13:03:81:1a:83:f9:c7:85:ca:2f:52:07:26:ba:3e:5a:9c:c2:
bf:27:98:69:83:4b:fd:03:81:10:16:57:97:98:12:6a:bb:86:
5f:22:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:29:23 2026 by rpki-client