Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.cer (raw, json)
Hash identifier: 3sBu2FSS96tYGtWNPWng6LAJ5omuJptNAlh0Drp1RN4=
Subject key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C3E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jul 2026 14:35:03 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 152106
IP: 202.36.228.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181219 (0x2c3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 14:35:03 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:c0:e0:0a:d3:8e:e3:2f:8a:62:c2:87:ba:
49:c4:ee:a3:74:c6:55:68:71:73:a8:ac:f4:a0:fb:
44:32:38:26:d5:e0:9b:1c:ee:c2:79:c8:66:c3:c5:
38:c2:44:21:23:00:12:f0:6a:89:ff:92:de:dc:70:
d3:db:c0:5d:09:a7:e5:33:3d:e5:2c:7c:3e:b1:b7:
cc:1a:3f:8d:8e:79:a1:c2:cf:f6:aa:ab:38:39:82:
8b:5a:46:a0:f4:ae:de:d3:92:ed:f3:80:80:84:c5:
af:9e:13:1d:38:09:29:9e:6f:80:86:d9:3e:b2:8e:
ef:52:58:6e:9e:6d:5f:90:9c:8f:bf:ed:c6:92:5c:
d9:1f:38:2c:14:80:b0:88:92:92:ea:89:b3:60:12:
21:d2:01:78:d6:e7:b8:42:cf:70:b3:97:53:6c:3c:
15:cd:34:3e:41:37:c5:af:27:bb:87:03:a7:bc:49:
11:e5:53:81:4a:c3:b6:37:d9:b8:5c:15:e2:ed:08:
9e:f8:ea:1c:0a:1f:50:71:a2:e0:3c:52:9b:28:ee:
5e:b5:b9:b5:bb:38:29:ec:c3:07:9c:23:5c:27:e6:
d3:78:bb:39:b6:69:50:a2:43:a4:53:b9:0a:89:81:
33:b4:ce:9e:9a:37:4e:78:7f:b4:44:ee:4c:bb:f5:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152106
sbgp-ipAddrBlock: critical
IPv4:
202.36.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d7:4e:bf:28:bd:78:71:c4:f6:1a:90:78:74:37:17:4c:75:
6b:d2:26:1a:9f:e1:89:a8:9a:9f:cc:4f:4c:32:41:f6:90:46:
70:08:94:5f:e4:14:c4:0c:35:cb:7c:f5:ed:f1:93:f7:f5:73:
47:87:65:32:d3:07:3b:5f:ce:ef:5f:cd:a4:59:7f:f8:ff:50:
ef:c1:b8:26:80:4b:d9:58:e8:ff:6e:aa:b0:1f:fc:e6:44:ea:
7d:27:0c:29:3b:f6:52:c0:42:3c:47:53:f8:df:ba:c1:33:a8:
55:e1:32:8d:66:0b:7b:b2:5e:62:f9:18:0e:ea:66:b6:f3:80:
77:61:92:aa:60:70:ad:24:92:2d:2f:9b:77:8d:e2:2f:ba:4c:
57:a4:db:2c:e4:e3:9b:c2:a0:05:e7:b4:50:06:03:0d:55:a3:
72:7f:e3:fb:f3:e2:ee:01:b3:75:61:53:18:d7:e5:0c:58:c8:
12:8f:8d:61:34:cb:95:bc:19:04:f8:48:0f:da:ec:83:e2:3d:
06:1b:f2:b2:cd:26:62:fe:25:f8:b7:e2:bb:fd:46:bc:67:3d:
3a:25:0a:d6:1b:f1:62:a0:cd:ed:48:2a:91:f0:b3:96:02:2b:
4a:2b:41:c7:dd:56:ac:f1:8b:4c:fa:34:ee:8d:d4:55:bc:4b:
43:4e:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:57 2026 by rpki-client