Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
File: YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer (raw, json)
Hash identifier: CyHFreQJoa58c1xoR0WMjT9EjpzSmCMMVcCyRRUk9r4=
Subject key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:11:34 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 14.137.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171919 (0x29f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:11:34 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:65:81:3e:99:06:75:ca:1d:e0:b7:06:62:
50:f1:24:8b:76:37:3a:58:75:be:f2:2b:6d:0a:ff:
da:91:81:d2:72:78:ac:47:04:4a:a6:d5:89:0a:74:
26:d5:d4:09:f8:0e:5a:e1:3b:da:cb:f7:af:2e:a1:
95:12:25:b1:c0:93:91:bf:5c:91:89:e7:e7:54:1e:
c9:81:81:9e:2d:87:74:50:3a:f7:c7:c1:59:1e:7b:
b0:43:7f:5d:e8:aa:1f:7d:59:59:72:c4:08:17:50:
e5:d1:9b:2e:4e:c8:29:fd:f5:f2:83:1b:e6:dc:82:
dc:96:20:57:8d:8c:37:e6:03:c7:06:1a:20:9d:ca:
a9:02:2e:12:2a:2a:fb:a1:8c:e5:1b:4e:ad:d5:6a:
0f:50:b8:20:d0:35:e5:42:b2:0c:5e:32:89:3f:46:
b7:d9:25:80:53:32:c4:30:b5:ac:a5:66:19:d1:67:
57:e4:48:48:80:56:74:64:2d:ef:c4:2e:24:ad:e1:
c8:24:bd:2a:5a:49:c6:bb:8b:6f:98:7b:71:60:2c:
91:d5:14:7f:9b:97:d7:ff:22:a2:e7:f2:4b:cd:0d:
a5:7b:9c:24:2e:97:fd:a2:ec:b3:e0:88:b6:38:82:
6b:93:d2:ad:51:13:4f:07:39:fc:97:e8:6e:9d:ee:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
17:f1:68:6c:40:06:59:29:fb:14:f8:ba:1e:33:d2:9f:63:8c:
6e:d7:e4:24:08:d4:0d:21:bc:e5:ea:71:61:a0:98:1f:5b:63:
a9:1e:1f:90:d8:f0:f5:2b:1b:aa:4e:be:6b:f4:29:36:61:e3:
88:98:05:5a:c5:0e:64:53:ab:70:82:d3:7b:05:e0:1a:a8:4c:
0b:a7:dc:b0:e6:e5:5a:9b:e2:58:cc:7f:41:60:43:6a:23:a3:
18:09:50:7c:ea:14:6d:b2:04:71:34:4a:7f:ab:c1:ad:8e:8e:
95:75:5e:2a:d5:9b:8f:c0:f5:56:93:40:55:6c:d8:6c:aa:34:
b9:4c:52:d9:92:d2:f6:7a:3e:5e:08:4f:b0:88:c0:e4:a3:96:
61:6d:d4:7f:f9:a4:86:59:ff:df:ef:f5:ad:19:62:30:bc:25:
66:3d:df:c0:69:bf:8f:36:21:9b:5e:ea:57:fe:63:d0:0d:b2:
3a:48:b6:c7:bc:88:bf:cc:29:c6:25:ec:20:e1:eb:45:5e:4d:
a5:82:af:76:c8:91:15:15:2c:b7:05:74:70:7b:b0:aa:f7:fc:
f0:6f:f1:98:3d:f6:22:03:5f:5e:f5:51:5a:eb:be:76:10:dd:
a8:28:3e:ba:cc:1d:19:f4:22:15:14:a3:6b:d6:b4:7d:03:39:
26:f0:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:12 2026 by rpki-client