Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer
File: y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer (raw, json)
Hash identifier: +DS8O/yM1650xgZg/bFqP1WUjwdRJo6fZBmZHgfq23w=
Subject key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5504
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft
caRepository: rsync://rsync.cernet.net/repo/cernet/2/
Notify URL: https://rpki.cernet.net/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 14:08:29 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:5::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21764 (0x5504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 25 14:08:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:fb:f1:42:56:89:e1:88:e7:77:ca:93:e5:
44:70:6b:fb:b9:4f:2c:5c:f3:0e:69:5b:a3:cc:2e:
3a:55:34:c9:fc:3b:49:58:bf:a5:dc:f9:55:15:20:
7b:2c:7e:5f:8a:1c:2a:84:f7:42:44:cb:bc:7f:85:
14:4d:b6:4e:2a:9a:28:25:98:00:3e:a9:1c:e7:7f:
73:6c:1f:58:e6:4f:81:6e:a5:19:14:b2:0e:82:83:
87:83:be:b1:97:6e:f5:29:bc:4d:a3:98:61:0b:b6:
8b:57:a2:f6:61:4b:b8:a5:09:95:03:e2:2c:1e:c4:
e5:0a:d7:cc:ae:27:ea:0f:6a:c6:d8:7a:2e:dd:91:
01:ab:4f:14:f4:41:e8:b2:b7:fc:85:ff:0d:69:31:
04:d1:df:e8:4d:63:00:18:4d:9c:10:dc:67:2e:32:
93:df:fb:6e:26:20:97:e3:a6:d5:62:67:9b:77:f0:
be:57:2b:64:48:fc:6f:4e:10:f4:4d:5c:a9:c6:bd:
a6:c5:5a:4e:f3:42:30:87:2e:6f:fb:1b:f9:21:b7:
cb:09:de:0a:7e:d9:4d:47:e5:dd:76:03:98:95:68:
e7:fe:89:78:ee:74:f4:a6:f9:91:1a:40:40:3a:bb:
26:4c:dc:90:c3:73:f4:df:ad:12:49:52:a4:83:da:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.cernet.net/repo/cernet/2/
RPKI Manifest - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft
RPKI Notify - URI:https://rpki.cernet.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:5::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d3:0b:f4:48:b7:5d:06:cc:e2:e0:c9:eb:05:a5:f3:b8:cf:
b2:8c:7f:18:e0:6d:f6:e4:4d:79:cc:66:91:0c:dc:f3:64:7f:
f5:eb:a0:9c:1d:e3:ac:5c:a8:41:1d:6c:c8:a6:65:c1:03:6c:
8b:b8:b4:01:78:52:0f:65:7c:3a:d2:c9:9e:c1:86:c2:52:7e:
f2:2f:da:06:d0:b8:2c:30:9d:4a:17:1f:bb:a9:a2:9c:1b:44:
38:74:72:0f:9b:c4:eb:80:65:12:0b:c5:c8:69:87:b5:0c:63:
1b:39:e2:cf:10:82:fe:7b:4c:4e:50:fa:56:2b:a7:9b:3b:73:
50:0c:a1:ef:5c:0a:68:c9:7c:d9:24:f7:12:cd:ba:60:44:ac:
1d:2c:83:d4:8d:7b:63:ee:28:ed:6b:b1:1b:ad:6d:08:3a:52:
a6:98:55:05:d3:c2:b5:23:8f:f0:e3:cc:58:02:0f:02:64:a3:
df:ef:0b:60:b7:03:73:1b:c9:71:f9:d6:02:d8:b1:47:ab:b9:
6f:bb:17:be:b3:9c:8f:cc:88:d7:df:c4:64:15:84:0b:00:95:
b2:41:99:7c:aa:f2:2b:14:fa:13:e1:d0:4b:65:6f:8f:0f:15:
82:2d:44:90:47:17:b5:49:04:b6:7b:5f:c0:b8:41:a5:4d:69:
df:c7:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:23 2026 by rpki-client