Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
File: y-PSoWWxlLlY7sO2qURXdyo6CSo.cer (raw, json)
Hash identifier: 96MzeUGzoxB7xQ3tqfi4n4Wr3FiDopffrQEU+XlzMxI=
Subject key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 13:00:55 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.123.164.0/22
IP: 2403:a4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187176 (0x2db28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 13:00:55 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:10:32:42:28:b1:b4:28:8e:1f:22:f3:0d:
ed:4e:94:d8:56:6a:58:58:84:b4:8c:06:6a:97:fe:
1d:b7:f1:d1:31:69:3d:53:64:9d:e7:7a:3c:08:ef:
58:37:ec:68:12:13:a2:f4:79:4b:3a:39:23:93:25:
53:4c:7a:76:94:f3:5d:2e:79:73:d0:a2:13:9c:a7:
bf:54:5d:aa:39:5e:9c:8b:c9:b2:73:ab:dd:06:6d:
79:e2:78:c6:93:e2:51:ac:8f:d1:ee:78:47:eb:b0:
82:26:47:b0:b0:19:e4:9d:f6:51:e2:6b:77:6d:84:
fc:8e:65:0c:17:5a:c5:92:42:de:cf:5c:61:fd:0f:
5f:b5:d1:99:20:ce:ea:94:6a:b2:91:b3:5f:88:ec:
74:df:ee:84:ee:03:d8:20:53:6e:61:49:69:c6:88:
d4:c3:f8:cb:d0:3b:03:39:f6:c4:b0:5e:cb:b3:66:
3d:43:0b:f2:fa:ae:02:16:61:f9:d1:9d:65:b4:93:
1b:0a:b2:d8:de:83:0b:c7:f8:aa:68:06:af:12:31:
67:38:44:74:57:38:63:ce:8e:d6:06:e2:95:d4:20:
c0:94:5b:5e:12:3f:ea:d5:ab:ea:26:e0:24:ca:97:
d7:96:a5:d5:16:72:95:b5:f0:64:32:ee:81:40:d3:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.164.0/22
IPv6:
2403:a4c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:16:06:75:f2:52:d0:cf:e2:c3:06:55:eb:51:71:19:2e:17:
d5:3c:58:30:c4:a1:b6:83:a6:27:db:e3:68:6e:72:1d:45:81:
c6:de:40:e9:bd:c6:bc:2e:4d:d4:d7:1a:5a:bb:7b:e3:f1:4a:
7e:da:62:5a:83:48:af:d5:d4:1e:49:98:40:50:46:09:1b:25:
52:67:15:05:16:55:b2:ff:b7:d8:94:48:1f:0d:52:54:a8:ea:
24:2b:fa:52:3e:38:37:8c:8d:8e:df:c5:29:4b:63:91:f1:90:
d6:84:fb:d1:90:60:cd:86:c2:8d:c1:44:58:dc:6a:9d:d3:06:
85:f6:7d:1e:81:4b:ea:35:ba:28:37:cf:be:ac:b7:9f:3e:7a:
45:87:71:a3:6b:93:db:ca:5d:25:4a:29:0f:77:9a:92:3d:62:
00:b0:12:58:dd:0a:ca:11:db:34:57:ec:8c:ee:32:29:ec:7b:
91:5c:65:4f:90:bd:05:fa:01:8f:e3:80:0b:1d:5a:46:47:89:
6a:33:85:3b:51:94:92:0f:92:96:77:56:3b:fc:d6:22:95:4d:
2e:c6:4d:87:16:50:d0:ab:2a:86:fa:6b:35:ca:c0:cb:98:a4:
19:4d:80:eb:cf:08:52:23:53:7d:b9:fb:b6:7a:bc:96:de:31:
ff:d8:dc:67
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAtsoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAwMjEzMDA1NVoXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNC
NkE5NDQ1Nzc3MkEzQTA5MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT1RAyQiixtCiOHyLzDe1OlNhWalhYhLSMBmqX/h238dExaT1TZJ3nejwI71g3
7GgSE6L0eUs6OSOTJVNMenaU810ueXPQohOcp79UXao5XpyLybJzq90GbXnieMaT
4lGsj9HueEfrsIImR7CwGeSd9lHia3dthPyOZQwXWsWSQt7PXGH9D1+10ZkgzuqU
arKRs1+I7HTf7oTuA9ggU25hSWnGiNTD+MvQOwM59sSwXsuzZj1DC/L6rgIWYfnR
nWW0kxsKstjegwvH+KpoBq8SMWc4RHRXOGPOjtYG4pXUIMCUW14SP+rVq+om4CTK
l9eWpdUWcpW18GQy7oFA05S/AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUy+PSoWWx
lLlY7sO2qURXdyo6CSowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0RkU3LzVBMkQ4OUVBREI3RDExRUFCQ0YzRUMzRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dX
eGxMbFk3c08ycVVSWGR5bzZDU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJne6QwDQQCAAIwBwMFACQDpMAwDQYJKoZIhvcNAQELBQADggEB
AF0WBnXyUtDP4sMGVetRcRkuF9U8WDDEobaDpifb42huch1FgcbeQOm9xrwuTdTX
Glq7e+PxSn7aYlqDSK/V1B5JmEBQRgkbJVJnFQUWVbL/t9iUSB8NUlSo6iQr+lI+
ODeMjY7fxSlLY5HxkNaE+9GQYM2Gwo3BRFjcap3TBoX2fR6BS+o1uig3z76st58+
ekWHcaNrk9vKXSVKKQ93mpI9YgCwEljdCsoR2zRX7IzuMinse5FcZU+QvQX6AY/j
gAsdWkZHiWozhTtRlJIPkpZ3Vjv81iKVTS7GTYcWUNCrKob6azXKwMuYpBlNgOvP
CFIjU325+7Z6vJbeMf/Y3Gc=
-----END CERTIFICATE-----
Generated at Tue Nov 10 17:15:51 2026 by rpki-client