Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
File: 0ypa3AVCwugXwgK-a3KB6GnReJc.cer (raw, json)
Hash identifier: vuNn7ttA2fw47PAcl/9LVFeF+2QbstFTt1cLg/AuvX0=
Subject key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8187
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Aug 2026 13:51:56 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33159 (0x8187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 30 13:51:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:20:45:7c:a7:b5:b4:78:fb:a8:d7:47:94:
06:f5:d8:8a:dd:0d:0b:df:2a:6a:7f:75:76:55:1e:
b5:a7:26:22:aa:55:2d:5a:6d:f8:06:3d:41:af:97:
c8:76:46:f4:35:8d:b8:e7:7c:68:58:5b:43:a0:02:
26:42:9d:78:2e:81:ff:11:ea:06:de:1a:e3:16:1d:
bb:96:ba:7c:bc:ca:e2:1c:f0:0a:33:77:57:c9:ca:
2b:74:46:80:12:1b:b8:85:eb:b1:12:82:74:c7:28:
bb:9b:98:9b:aa:5b:35:76:b2:84:5e:5a:18:e4:ec:
94:6e:26:c4:2c:f5:73:16:20:20:f4:63:9e:a5:ba:
fc:10:1c:e6:ee:6c:65:13:a4:ca:33:8a:6b:f6:ff:
b0:a4:cc:95:19:b1:4b:83:84:28:22:ab:99:fb:21:
d2:62:c3:82:41:4b:60:72:cf:37:69:1e:59:25:b7:
46:ec:a1:e2:0e:cf:45:65:62:f0:c5:3f:80:f4:32:
f4:d6:9d:b8:15:f0:31:ce:f7:5f:d5:e0:8d:f0:1a:
a7:b2:5b:1b:c2:63:14:50:0e:07:80:89:30:ee:2b:
e5:61:84:f3:0c:b9:b7:d3:4d:12:90:a6:b2:13:67:
d9:97:18:70:12:5d:8d:6f:16:bd:76:ea:78:4c:d8:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.224.0/23
Signature Algorithm: sha256WithRSAEncryption
03:d8:bf:76:65:82:80:7d:3c:c7:c7:3c:2e:39:a1:e4:cc:d4:
51:ae:39:96:ba:06:71:a8:c0:ea:c8:bb:45:a0:26:9c:b7:bd:
2d:ed:3c:a4:90:4d:6e:68:6b:05:ef:72:f3:ec:29:45:a6:8c:
8f:70:cd:72:b6:f2:84:40:01:b8:c4:3c:df:7e:bb:27:cd:10:
8e:53:f4:b4:04:88:a1:06:9a:ff:d9:5f:21:6f:06:70:37:58:
a7:b6:49:07:24:24:f0:ad:9d:1e:02:22:8c:4a:2f:a7:88:cb:
29:75:99:d7:7e:07:76:10:1c:f8:31:8d:17:da:52:0e:ca:f2:
75:b2:f3:0f:c4:b1:b9:1e:2b:04:65:5d:3e:c4:68:f3:92:ce:
61:54:d4:bc:bc:d2:43:07:3b:d4:dc:fb:f1:cc:44:c1:8f:f9:
87:69:66:e0:6a:43:6f:8d:e7:00:fa:f3:f1:f3:fb:e8:5b:b8:
b0:60:42:28:cd:73:c9:bf:cc:19:4b:97:a2:30:ea:06:d4:8a:
35:59:8e:16:f3:4f:ae:d4:90:47:c4:aa:09:e9:f6:8d:14:3b:
7c:f4:5e:bd:b5:07:c7:d3:9a:3f:d3:eb:3c:98:84:15:77:e4:
1d:57:36:c2:c7:28:eb:67:d2:7a:c9:eb:05:d1:10:ad:38:d0:
ac:50:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:42 2026 by rpki-client