Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer (raw, json)
Hash identifier: tY1AN1fg2DlJKXf+PleW9XLHgMLaIJhowwz7/lr9GRs=
Subject key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DD45
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 10 Oct 2026 13:25:00 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 45597
IP: 203.176.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187717 (0x2dd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 13:25:00 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:97:da:2e:b7:45:99:bf:7b:96:80:08:12:
02:4e:f7:01:13:5f:dc:e0:18:07:a4:4e:37:19:fb:
ce:9d:40:7d:4c:9d:31:5b:34:bf:db:ef:0d:87:90:
70:dc:78:b6:c5:c4:c7:e1:9d:90:b0:ab:cb:b1:81:
ab:ab:6d:84:cf:ad:a6:f0:81:43:95:8d:43:b9:0e:
a5:67:67:50:5e:a4:f6:68:84:9a:e6:a2:77:32:cf:
9d:c9:a5:87:4a:38:2f:f0:7f:9b:b5:3e:52:4b:af:
72:5f:49:e9:ea:50:b7:a5:9c:08:a3:78:9a:ee:e1:
7a:64:e8:c7:0e:5e:ae:a7:2e:c4:1c:c7:6f:22:ea:
4f:9f:f6:75:c9:41:a4:38:35:88:c2:37:fa:01:5b:
ad:e6:b6:22:a7:46:39:00:61:82:e9:cf:7d:2b:4f:
3c:a0:94:ff:60:23:6c:72:e1:8c:c8:57:5c:e7:c6:
36:33:1d:1e:35:51:40:aa:82:af:2f:39:9c:1e:21:
2f:36:f0:31:13:6e:80:d4:69:15:81:22:a8:89:50:
ed:79:27:94:e5:9f:3b:31:55:ba:78:f1:c4:6d:42:
3d:e5:7f:3a:91:e5:34:b4:38:ce:1e:06:8f:73:5d:
13:7d:7d:e3:8c:52:ed:fc:4f:88:0e:a2:61:11:55:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45597
sbgp-ipAddrBlock: critical
IPv4:
203.176.114.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:d9:e2:b3:01:a0:5b:ae:09:40:9f:29:75:5b:48:e2:ee:c6:
a1:f4:6d:6d:30:67:02:c8:68:da:e0:2a:b9:2d:ff:18:d0:ed:
ef:b2:a3:60:3a:cb:e1:17:46:6e:18:22:60:15:8c:5e:52:cf:
03:50:d7:c0:d8:53:f6:b6:b4:8e:5a:f0:54:dc:70:56:ba:a7:
11:fb:8b:3d:a2:c5:7b:93:a6:85:46:3e:ef:44:af:c2:73:99:
32:af:fd:65:dd:b4:e6:c2:47:81:a4:0d:b3:9b:14:5e:74:99:
87:fc:0a:53:f8:02:28:6b:92:99:9b:d7:71:88:a2:eb:34:b8:
49:8a:06:6d:5f:54:7e:0c:07:78:bc:6b:8f:e1:80:29:5f:05:
4a:6d:11:52:a5:89:ea:4e:5d:49:81:12:8f:b9:8e:5c:99:83:
24:59:b5:a1:7e:6e:0b:6f:f7:5e:c3:9d:6e:ab:cd:a8:5f:b0:
1e:cd:14:11:05:8a:6c:ee:12:cc:71:23:5d:c9:fe:56:b4:a3:
63:14:e8:b7:8b:ad:79:18:0c:ea:82:9c:9b:ad:19:58:ca:9f:
07:e2:36:84:a3:31:1e:b7:dd:82:be:e2:91:6e:ac:30:b0:05:
1f:20:ec:81:62:6c:96:34:f3:69:92:e8:f9:54:c7:d8:fa:88:
5d:e7:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:27:49 2026 by rpki-client