Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYxqnmH8V2b1GpWHphdTxKJlYTo.cer
File: dYxqnmH8V2b1GpWHphdTxKJlYTo.cer (raw, json)
Hash identifier: Jymb/W2bLnHHyzsE2qf73mfmWIP/ukbM7Bx+OdlHsLo=
Subject key identifier: 75:8C:6A:9E:61:FC:57:66:F5:1A:95:87:A6:17:53:C4:A2:65:61:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C89A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91930DA/25A02AD48BEE11F1A8488A7A3911F970/dYxqnmH8V2b1GpWHphdTxKJlYTo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91930DA/25A02AD48BEE11F1A8488A7A3911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 08:10:42 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 154768
IP: 2001:df7:41c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182426 (0x2c89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 08:10:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91930DA, serialNumber=758C6A9E61FC5766F51A9587A61753C4A265613A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:79:95:e1:96:95:fd:e7:17:ae:79:0f:b2:
55:9c:34:42:ac:b9:43:7b:68:70:2c:94:96:af:8e:
53:aa:0e:fd:27:66:17:c5:3f:dc:76:86:0c:7d:22:
a8:ab:76:5f:41:02:da:b4:93:87:52:92:a6:d8:8d:
79:bc:d4:38:78:4e:dc:37:af:27:2e:fe:b8:b6:7a:
9c:71:33:37:31:69:d3:66:13:4e:85:42:90:77:67:
32:ba:af:41:65:18:f7:33:ae:09:03:24:9a:3b:98:
cb:53:7b:d8:76:67:3b:aa:4e:73:59:8b:c3:83:48:
85:07:5e:5f:cf:16:0e:20:a1:ca:24:ef:bf:75:a6:
bf:03:bf:77:57:e1:07:16:22:89:3b:01:e1:91:a4:
01:09:66:ee:78:39:a8:54:4f:20:e9:56:9a:57:eb:
f3:af:27:98:d7:69:e5:a3:40:f5:c0:84:fe:20:33:
fe:8c:14:d8:2c:13:02:b3:03:1b:b3:b5:b3:8d:54:
f5:79:59:dd:22:50:71:2b:b6:6e:25:a3:b5:f5:a2:
60:d4:03:d6:06:24:19:af:53:c7:0c:ac:52:a4:b5:
66:f3:49:c7:58:8f:37:7b:fa:90:d6:35:ee:fe:7d:
6b:45:b0:51:69:68:50:94:62:ad:ef:92:21:3f:0d:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:6A:9E:61:FC:57:66:F5:1A:95:87:A6:17:53:C4:A2:65:61:3A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91930DA/25A02AD48BEE11F1A8488A7A3911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91930DA/25A02AD48BEE11F1A8488A7A3911F970/dYxqnmH8V2b1GpWHphdTxKJlYTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154768
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:41c0::/48
Signature Algorithm: sha256WithRSAEncryption
d2:c9:5d:fe:8b:c4:92:60:a9:f9:e1:ad:ca:bf:f9:5c:ee:17:
3f:6f:7b:6c:5d:18:1e:3d:04:7a:0b:78:fd:7a:65:45:05:8f:
f8:af:ef:db:c1:00:53:a1:7f:39:fe:4a:19:a6:aa:53:91:ba:
14:a2:20:d6:d3:e7:fd:62:24:04:bf:5f:3a:fe:0f:37:3f:ef:
ba:f7:87:2a:d3:a0:d6:4d:78:58:8e:56:54:db:35:a9:45:c8:
3c:cf:1b:e5:fc:8b:b5:13:72:d1:30:51:0b:f7:b8:81:1a:cb:
55:09:60:12:be:d0:a9:a9:b6:42:65:32:8c:b6:7d:61:4e:0f:
3d:36:11:97:1a:92:84:6f:3f:96:a0:8f:a1:09:cd:be:7d:69:
78:a9:19:0f:f8:03:14:1b:ac:de:c1:91:2b:3e:5a:ec:ef:66:
ca:9c:fe:17:a6:09:96:46:f0:a8:7a:41:79:cd:f8:4b:f5:27:
b7:7b:f6:8e:1e:e9:3d:bf:29:90:61:b7:20:f3:61:a4:33:14:
bb:82:77:6f:da:c4:5b:1e:25:75:a1:8c:da:c2:db:a3:a9:34:
87:e6:f6:1c:53:b5:51:a6:65:87:de:79:34:0f:d9:61:41:fd:
e4:25:49:d3:2d:b8:40:10:5a:1c:23:74:66:be:f7:8f:34:dc:
4b:91:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:22:22 2026 by rpki-client