
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
File: BYl-c1406PZYdVSprzc0CCziidk.cer (raw, json)
Hash identifier: D9+MMOBeVyLTYY0aH9lyBWGTGR6nr0flDyRU1HGtqPE=
Subject key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8194
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Aug 2026 06:54:27 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33172 (0x8194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 31 06:54:27 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:70:41:5d:87:7c:91:b2:49:77:ed:96:48:
86:11:79:e4:f4:1d:51:8b:d7:38:31:59:2c:e7:12:
39:04:c8:2a:0a:5d:9e:f2:23:de:61:88:4e:10:48:
03:de:f2:83:2f:a5:8d:22:31:01:e6:c5:22:f4:6f:
33:b6:b3:af:83:9e:ae:ae:e6:3d:de:d1:be:08:da:
04:a8:fa:d2:58:6a:5b:08:18:2e:64:79:35:29:8d:
72:88:e1:4f:dd:e6:aa:5f:99:13:46:04:da:b3:4f:
9b:21:e3:43:7f:15:85:8d:36:5d:1d:65:71:c3:4e:
3a:63:27:0a:a4:f0:84:9f:b2:fa:05:be:13:82:3d:
2d:02:68:df:e1:6e:2b:6a:18:f7:3b:0f:24:88:f7:
ac:cf:30:32:cf:21:31:f7:de:47:10:a5:64:dc:11:
5e:bf:13:51:ed:2e:96:49:33:c5:04:88:a9:a6:f3:
c7:f7:43:cd:0d:62:90:cc:20:c0:84:a0:9c:ae:90:
57:d0:ac:6e:82:f1:0d:3e:ad:00:de:6e:ad:9a:a6:
36:0d:c9:f9:a6:6e:4f:6c:f8:e6:02:51:3a:c0:88:
41:77:52:86:9c:2e:1f:02:fa:4d:ff:2b:f5:d3:a5:
d1:70:47:c7:03:81:fa:7a:79:9a:7d:65:b2:5c:7d:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.20.0/23
Signature Algorithm: sha256WithRSAEncryption
03:31:74:e6:71:5b:4c:8c:5c:02:bb:11:ec:6d:21:6b:70:e9:
c2:33:56:64:4f:49:d0:0f:20:03:9d:e8:e5:a8:c1:ff:09:7a:
09:fd:34:e1:b5:b8:59:6d:41:21:7b:68:7e:c1:52:8e:e7:3f:
42:8f:13:07:85:26:c0:ab:3b:12:20:ba:04:f0:0e:b9:44:a0:
ea:f0:e1:c0:a3:cd:d7:d5:90:43:4b:b4:ff:61:3a:fe:7d:de:
bb:56:f4:25:f8:c5:9f:6f:b9:de:fa:ad:2a:55:47:0b:9c:f9:
6b:8a:f9:8a:55:bc:2c:c5:f5:62:22:1c:9f:1a:a3:6d:6e:1b:
b4:36:67:67:be:d0:f9:8e:5c:de:4a:7a:09:67:7a:49:88:be:
63:d5:4e:e2:b0:c9:ea:37:15:ea:d5:93:69:8b:76:99:37:84:
85:0d:33:23:55:a6:dd:eb:33:bd:b2:88:a4:4e:a8:ae:b1:bb:
b1:2e:f6:56:c0:ee:81:33:75:9c:02:25:9d:8e:4f:9e:07:e0:
4c:4b:10:3b:4f:61:cd:fd:65:3c:af:cc:7b:6f:f2:fb:3b:0f:
ea:c1:6d:34:fc:a4:71:05:69:61:61:9d:4a:7a:d6:10:3f:79:
7b:d3:ab:ac:3f:89:b3:f1:ce:bc:19:7d:4d:8f:6b:e0:c6:c7:
b8:09:43:e4
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIGUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgzMTA2NTQyN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzg5RTcxMTAvBgNVBAUTKDA1ODk3RTczNUUzNEU4RjY1ODc1NTRB
OUFGMzczNDA4MkNFMjg5RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCppnBBXYd8kbJJd+2WSIYReeT0HVGL1zgxWSznEjkEyCoKXZ7yI95hiE4QSAPe
8oMvpY0iMQHmxSL0bzO2s6+Dnq6u5j3e0b4I2gSo+tJYalsIGC5keTUpjXKI4U/d
5qpfmRNGBNqzT5sh40N/FYWNNl0dZXHDTjpjJwqk8ISfsvoFvhOCPS0CaN/hbitq
GPc7DySI96zPMDLPITH33kcQpWTcEV6/E1HtLpZJM8UEiKmm88f3Q80NYpDMIMCE
oJyukFfQrG6C8Q0+rQDebq2apjYNyfmmbk9s+OYCUTrAiEF3UoacLh8C+k3/K/XT
pdFwR8cDgfp6eZp9ZbJcfc+dAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUBYl+c140
6PZYdVSprzc0CCziidkwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4OUU3Lzk5RDI4QzlDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzODlFNy85OUQyOEM5QzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0
MDZQWllkVlNwcnpjMENDemlpZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlZRQwDQYJKoZIhvcNAQELBQADggEBAAMxdOZxW0yMXAK7Eext
IWtw6cIzVmRPSdAPIAOd6OWowf8Jegn9NOG1uFltQSF7aH7BUo7nP0KPEweFJsCr
OxIgugTwDrlEoOrw4cCjzdfVkENLtP9hOv593rtW9CX4xZ9vud76rSpVRwuc+WuK
+YpVvCzF9WIiHJ8ao21uG7Q2Z2e+0PmOXN5KeglnekmIvmPVTuKwyeo3FerVk2mL
dpk3hIUNMyNVpt3rM72yiKROqK6xu7Eu9lbA7oEzdZwCJZ2OT54H4ExLEDtPYc39
ZTyvzHtv8vs7D+rBbTT8pHEFaWFhnUp61hA/eXvTq6w/ibPxzrwZfU2Pa+DGx7gJ
Q+Q=
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:59:22 2026 by rpki-client