Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
File: Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer (raw, json)
Hash identifier: 0TSDS6ycm+G3O7CrMUzwZAfzIYUCJSAmKZZW+kUSp2w=
Subject key identifier: 61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 520C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 04:05:24 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 85.155.72.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21004 (0x520c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 5 04:05:24 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9181375, serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:7b:7b:ab:e1:16:fe:25:35:c4:cf:b4:0f:
94:81:db:67:7a:ab:65:77:6c:38:79:e6:98:1f:05:
ce:0f:eb:1d:59:d1:05:be:12:4b:1a:c8:aa:c8:34:
83:d1:3a:8a:8d:36:2f:62:10:6e:e5:ff:43:b2:98:
4c:7b:24:c6:ce:36:4b:f4:fd:90:3d:57:b2:bf:7e:
a7:73:9c:4e:f2:96:10:90:2f:70:cf:b1:81:89:0b:
52:cc:70:a2:a8:81:72:0b:ba:57:7a:bf:fa:a4:f8:
3a:ed:a7:42:10:e5:50:53:45:7a:2d:9b:1b:23:89:
9f:6e:b6:2b:68:13:55:8e:15:82:2f:1c:24:cd:5a:
53:de:c5:94:d3:c2:2f:9c:7a:06:34:47:f5:85:40:
3b:a4:1a:97:40:3d:9c:67:13:4a:aa:ef:a6:ec:8f:
41:90:83:6a:d8:cd:54:db:45:88:67:3a:15:c6:89:
a7:56:84:ed:3d:b0:0c:9b:b4:12:59:98:cc:21:e6:
60:65:8b:75:d7:3a:92:85:8f:05:6b:42:4f:f2:cf:
f6:6e:32:0f:5c:95:02:7a:7e:39:2a:df:43:1c:e7:
d2:8b:09:e9:ae:20:ea:23:8e:38:46:59:90:61:6a:
cd:18:21:bf:ea:b9:67:a8:8f:a9:ca:80:0d:55:aa:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
85.155.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:46:b8:ea:9e:5e:8a:ec:af:cd:f9:0d:13:c1:b6:b4:ad:e4:
5c:ed:f4:08:23:01:cd:e5:04:ca:d3:8a:82:e1:88:43:77:b5:
2c:d0:d1:90:21:36:3e:32:91:bb:a0:77:ab:49:19:4d:3a:12:
9c:05:12:b8:75:84:00:47:b3:5d:11:06:af:46:45:9e:e2:fb:
2d:8d:ff:82:e8:98:94:40:65:b6:f1:20:1c:9e:9d:bd:4c:4d:
dc:0f:8b:83:44:c0:49:8a:6e:13:a3:99:ad:31:53:41:55:6f:
fe:04:82:e1:ef:87:e1:de:8e:cd:65:ea:6f:5a:73:48:74:f3:
c1:91:48:f9:e6:36:76:e4:37:2f:4b:7c:89:e5:8d:49:be:8c:
11:ea:84:41:9f:af:39:81:cb:9a:21:31:11:e4:0c:f7:77:84:
83:2e:e3:e9:b7:bb:43:d1:5f:fa:ee:83:88:19:2c:a9:7d:88:
08:45:d5:71:26:11:42:df:47:55:dd:8b:53:7b:44:8e:a3:20:
e8:4d:3c:6e:2b:3a:67:27:f0:46:ab:43:ca:d2:ba:7c:cf:a1:
6c:f4:6a:42:cd:13:47:16:d5:ef:bb:6e:b0:45:c9:7e:76:f3:
ea:5f:6e:1b:0d:61:88:44:ae:d7:59:7e:bc:b3:65:1f:96:00:
db:b0:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:00:36 2026 by rpki-client