Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer
File: y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer (raw, json)
Hash identifier: xbpnWMgaBgFwvFxSMr4r9a+//o7sAZSvrm8O97aT3kU=
Subject key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft
caRepository: rsync://rsync.cernet.net/repo/cernet/2/
Notify URL: https://rpki.cernet.net/rrdp/notification.xml
Certificate not before: Wed 03 Jun 2026 06:43:19 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:5::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21409 (0x53a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 3 06:43:19 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:fb:f1:42:56:89:e1:88:e7:77:ca:93:e5:
44:70:6b:fb:b9:4f:2c:5c:f3:0e:69:5b:a3:cc:2e:
3a:55:34:c9:fc:3b:49:58:bf:a5:dc:f9:55:15:20:
7b:2c:7e:5f:8a:1c:2a:84:f7:42:44:cb:bc:7f:85:
14:4d:b6:4e:2a:9a:28:25:98:00:3e:a9:1c:e7:7f:
73:6c:1f:58:e6:4f:81:6e:a5:19:14:b2:0e:82:83:
87:83:be:b1:97:6e:f5:29:bc:4d:a3:98:61:0b:b6:
8b:57:a2:f6:61:4b:b8:a5:09:95:03:e2:2c:1e:c4:
e5:0a:d7:cc:ae:27:ea:0f:6a:c6:d8:7a:2e:dd:91:
01:ab:4f:14:f4:41:e8:b2:b7:fc:85:ff:0d:69:31:
04:d1:df:e8:4d:63:00:18:4d:9c:10:dc:67:2e:32:
93:df:fb:6e:26:20:97:e3:a6:d5:62:67:9b:77:f0:
be:57:2b:64:48:fc:6f:4e:10:f4:4d:5c:a9:c6:bd:
a6:c5:5a:4e:f3:42:30:87:2e:6f:fb:1b:f9:21:b7:
cb:09:de:0a:7e:d9:4d:47:e5:dd:76:03:98:95:68:
e7:fe:89:78:ee:74:f4:a6:f9:91:1a:40:40:3a:bb:
26:4c:dc:90:c3:73:f4:df:ad:12:49:52:a4:83:da:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.cernet.net/repo/cernet/2/
RPKI Manifest - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft
RPKI Notify - URI:https://rpki.cernet.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:5::/48
Signature Algorithm: sha256WithRSAEncryption
2d:e6:e7:36:16:8b:f2:f9:e1:c5:f3:59:f7:a6:e2:09:6a:4e:
64:64:d5:34:83:a2:bd:28:17:90:34:68:5b:1a:5c:86:a3:f1:
c3:7c:9d:5a:3a:22:aa:d1:9c:ae:79:1a:52:12:00:de:a6:a8:
f9:e6:15:9a:7f:59:cc:71:61:2b:9c:35:fd:16:72:12:89:56:
77:a5:6a:7d:c9:6c:fc:91:84:9c:65:94:d0:12:6b:2e:fb:b6:
a4:ad:04:74:25:87:8c:11:ed:ea:65:06:9a:14:60:d6:1f:a3:
f1:a7:34:f8:f7:88:03:06:68:dc:d4:82:8c:67:6c:a1:ae:c8:
12:73:20:bc:f9:a4:49:99:f0:e2:93:71:dc:7a:ec:2a:84:69:
d8:79:ec:00:8a:f9:12:15:61:a1:b8:32:0c:1f:d4:c2:76:6e:
34:79:28:73:4f:ca:72:b0:d1:3d:c6:9b:24:9e:df:46:6f:5d:
f4:f4:24:5a:a6:df:3b:79:cf:ab:b7:98:d8:c7:91:cf:f2:36:
0d:6e:96:9a:16:77:88:40:2b:94:ab:56:b7:ee:ad:30:8f:4f:
5b:b5:3b:8b:fb:ba:01:16:de:88:64:32:ca:b6:8d:f4:44:8a:
48:a6:8f:86:95:fa:60:0d:4c:0c:6f:15:c9:1c:08:82:db:24:
dd:1f:b7:ee
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgICU6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwNjAzMDY0MzE5WhcNMjYwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKENCNUY5NzVGM0YwMTkxOUJGNzQx
QTM0QURERjg4NjkzMkM1REIxOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsK/vxQlaJ4Yjnd8qT5URwa/u5Tyxc8w5pW6PMLjpVNMn8O0lYv6Xc+VUV
IHssfl+KHCqE90JEy7x/hRRNtk4qmiglmAA+qRznf3NsH1jmT4FupRkUsg6Cg4eD
vrGXbvUpvE2jmGELtotXovZhS7ilCZUD4iwexOUK18yuJ+oPasbYei7dkQGrTxT0
Qeiyt/yF/w1pMQTR3+hNYwAYTZwQ3GcuMpPf+24mIJfjptViZ5t38L5XK2RI/G9O
EPRNXKnGvabFWk7zQjCHLm/7G/kht8sJ3gp+2U1H5d12A5iVaOf+iXjudPSm+ZEa
QEA6uyZM3JDDc/TfrRJJUqSD2ofrAgMBAAGjggKuMIICqjAdBgNVHQ4EFgQUy1+X
Xz8BkZv3QaNK3fiGkyxdsY8wHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgeEGCCsGAQUFBwELBIHUMIHRMDMGCCsGAQUF
BzAFhidyc3luYzovL3JzeW5jLmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMi8wXwYI
KwYBBQUHMAqGU3JzeW5jOi8vcnN5bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8y
L0NCNUY5NzVGM0YwMTkxOUJGNzQxQTM0QURERjg4NjkzMkM1REIxOEYubWZ0MDkG
CCsGAQUFBzANhi1odHRwczovL3Jwa2kuY2VybmV0Lm5ldC9ycmRwL25vdGlmaWNh
dGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQf6AAUwDQYJ
KoZIhvcNAQELBQADggEBAC3m5zYWi/L54cXzWfem4glqTmRk1TSDor0oF5A0aFsa
XIaj8cN8nVo6IqrRnK55GlISAN6mqPnmFZp/WcxxYSucNf0WchKJVnelan3JbPyR
hJxllNASay77tqStBHQlh4wR7eplBpoUYNYfo/GnNPj3iAMGaNzUgoxnbKGuyBJz
ILz5pEmZ8OKTcdx67CqEadh57ACK+RIVYaG4Mgwf1MJ2bjR5KHNPynKw0T3GmySe
30ZvXfT0JFqm3zt5z6u3mNjHkc/yNg1ulpoWd4hAK5SrVrfurTCPT1u1O4v7ugEW
3ohkMsq2jfREikimj4aV+mANTAxvFckcCILbJN0ft+4=
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:18:41 2026 by rpki-client