Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
File: YwwCddFRnD7kuqftn9t0UvPhDEs.cer (raw, json)
Hash identifier: LEXPZgWTheeq0i09eaFdWaE2qkZvfqW0GhI4Tk5FF1c=
Subject key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5467
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jul 2026 21:28:51 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 78.142.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21607 (0x5467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 20 21:28:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:f7:6d:43:dd:a1:51:49:a3:67:64:a6:08:
7d:a9:3c:3c:2c:29:7c:a7:a1:48:33:f2:a4:f1:0a:
83:96:2a:f3:0b:c9:ae:d3:cf:35:3f:7b:b5:20:98:
7c:85:38:b0:54:b0:a0:62:05:bc:b5:c8:d7:93:1a:
8b:6d:13:76:32:33:82:e9:c8:1e:f3:b7:80:f6:56:
8f:15:8b:de:03:96:5c:b2:a7:ce:0f:89:41:1a:b1:
72:15:b5:99:a2:a2:84:cc:f1:65:5c:23:1d:85:23:
9c:89:d8:a4:6a:b7:48:a3:43:f4:6b:5a:ef:0b:2b:
07:00:09:94:a0:8e:02:e8:6f:d1:92:fb:f8:54:7a:
83:d8:8c:71:34:f1:e0:36:d7:89:0b:6b:65:f9:24:
20:ba:ce:15:ca:ca:2c:b3:cd:8b:b2:f3:0d:1e:ed:
90:af:66:6b:28:73:84:d6:36:91:c3:a0:80:24:e0:
4c:89:54:c6:37:91:06:d9:bd:13:e6:08:09:6d:f6:
93:9c:5b:dc:6a:63:69:21:dd:cf:02:47:18:5a:e1:
56:2a:6e:66:45:ae:29:9b:0b:3d:5f:26:7b:5a:ea:
ed:ba:86:9b:64:42:89:ba:bd:78:31:cd:f1:90:65:
0f:c8:0f:10:f2:b8:54:47:bb:65:19:56:2c:08:04:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
78.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:69:5e:94:1f:fa:1a:b2:76:19:d1:27:1d:30:c7:0e:8a:ec:
82:83:95:b8:5a:e3:63:3a:c2:07:b5:f0:c5:24:2f:eb:7b:31:
70:8d:1f:86:00:fd:54:27:84:79:67:e2:e0:ea:f2:c2:3c:e7:
c8:ba:c8:f1:98:16:14:7d:bc:a4:7c:68:e0:ff:7a:78:9b:d6:
4c:94:19:d0:bb:89:ab:35:64:56:0a:32:42:c4:91:d9:68:6b:
60:51:71:04:74:21:59:7b:cc:cd:95:09:0f:bf:ed:07:c6:fc:
bd:be:b1:9d:43:13:fe:dc:5a:bd:85:09:fa:76:4d:6a:74:45:
5c:94:f4:80:fa:d9:09:f1:f4:cb:88:94:09:d9:b4:d8:93:46:
93:a1:10:c9:9f:a0:7b:8f:ae:91:cc:f8:cf:00:37:00:46:fe:
20:7c:cf:b5:2f:fd:f4:e9:1b:e9:60:e4:b9:ce:6d:7a:7c:ed:
93:21:b9:2b:66:a3:45:cc:56:7b:c3:ba:02:2b:c6:f9:a6:b6:
6a:55:bc:84:a2:51:98:f8:95:e0:c1:05:d9:e1:d0:64:46:08:
b9:cd:64:fd:d7:f8:e7:a3:bd:d6:45:9e:8f:2b:d3:a9:21:22:
6f:eb:1f:30:43:5d:4c:a2:78:91:4c:5a:1e:1e:75:95:ac:63:
ca:2a:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client