Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
File: D6tO-YKPSvJnwW2K1HEKjuybu64.cer (raw, json)
Hash identifier: EOzv5j68KijboNOGOcvBSUQLL+hxVJ+Ot03Atw3+bBw=
Subject key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 540D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jun 2026 02:53:26 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 217.10.226.0/24
IP: 217.10.229.0 -- 217.10.231.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 15:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21517 (0x540d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 29 02:53:26 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0c:00:dc:df:2f:fc:c2:94:29:3a:49:98:
73:f1:dd:1a:15:12:bd:65:8e:35:db:50:6e:67:3a:
2f:01:fd:99:6f:61:55:3e:7b:3f:82:8f:af:8f:20:
66:b9:52:de:52:c0:d6:e1:2e:3a:e1:57:81:7c:17:
e7:64:fa:14:e0:91:0c:26:4e:5a:5c:27:38:11:5d:
a8:99:bb:fa:3e:34:1c:34:a8:35:a7:f1:7f:e6:81:
22:e0:9b:69:64:e6:32:81:82:14:42:f2:c2:72:17:
04:d6:99:13:8c:84:a7:05:9d:d3:86:5c:04:18:77:
1c:a3:aa:7b:90:56:b2:47:66:e5:4b:4d:31:ac:d6:
3f:36:de:fd:31:ce:a6:86:1e:ef:c6:00:ed:06:d7:
23:34:b4:2d:19:41:74:7c:95:22:5f:7e:29:b5:0d:
cb:b2:8c:76:8b:0c:e9:41:d1:2c:d0:38:8a:01:ba:
3d:18:71:a5:33:bd:ca:3b:b3:dc:d3:d3:cd:4f:18:
e4:20:48:45:a8:84:93:6c:31:23:c1:58:9e:45:54:
b2:19:28:a5:19:1b:13:25:cf:03:6d:de:50:39:a1:
e7:86:9f:39:01:71:6c:5c:da:52:cf:54:13:58:22:
be:39:c5:7d:40:2e:33:04:31:5d:b7:92:81:14:1c:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.10.226.0/24
217.10.229.0-217.10.231.255
Signature Algorithm: sha256WithRSAEncryption
32:b8:b7:27:ad:7f:6a:ba:18:8a:35:35:f6:37:b7:02:53:96:
41:f1:54:40:ac:97:e3:57:70:22:fb:63:8c:be:f2:6a:ec:0f:
22:5a:65:a5:c3:44:cd:55:52:33:8b:24:99:a6:93:ab:59:78:
ce:d1:89:e2:3f:31:d8:1a:15:ed:ef:9a:89:d2:4c:76:6e:f0:
7d:a5:1a:24:e1:69:a6:ba:42:ca:a2:e3:88:7d:86:f0:3d:4f:
2e:f4:e6:7c:19:fd:17:bf:4c:fb:7b:56:e4:3a:22:c7:b0:f2:
c4:80:ea:e5:d7:4b:c8:40:64:b8:c4:c0:4f:ac:24:4e:bd:d3:
cd:c1:46:90:8f:dd:d4:7a:f8:9b:9a:6e:2f:c6:0d:b4:c7:83:
74:71:54:a8:69:01:e2:47:d9:37:73:cc:28:5f:65:2e:18:fd:
6b:aa:d2:67:06:10:26:8b:b1:01:4e:84:db:7a:00:55:86:6e:
5c:40:d9:49:11:16:98:40:f7:93:ef:73:9e:c2:ca:44:41:f5:
15:52:0a:fc:42:df:60:cd:d5:53:79:cb:b4:a7:35:80:f3:4f:
1e:b3:ce:48:a7:59:4c:eb:15:9d:68:c5:71:12:e4:5d:d9:3a:
85:db:75:e9:38:92:27:db:d9:f7:af:11:69:b7:76:31:7a:78:
f4:45:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:59 2026 by rpki-client