Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer
File: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer (raw, json)
Hash identifier: dg0Z5tgvQIePo1/WC3kcDTNuTPid5KOVpHRfHPWAMoQ=
Subject key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 03:39:39 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 167.179.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 04:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32932 (0x80a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 13 03:39:39 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:a9:19:ff:9e:b0:64:bc:89:23:bb:be:6d:
33:97:52:0f:ef:c4:a9:29:48:23:be:68:dd:18:25:
a9:6b:1f:bf:ec:50:70:b2:cd:a1:56:8f:36:6e:33:
31:4c:ce:29:79:f5:41:c0:0e:e9:31:48:38:f8:58:
ab:fe:ce:4f:36:68:58:14:5d:66:a9:69:20:98:09:
e0:ba:67:d8:f7:2e:31:73:cd:fc:c9:f1:54:d1:aa:
30:7b:92:12:70:52:38:a3:1a:94:63:3c:5a:4a:f7:
f0:11:cd:b3:2a:06:3c:8b:3c:fe:6d:13:4e:4f:53:
f6:c5:5e:9a:76:f3:ba:15:36:7a:63:33:b0:cf:ec:
3c:1e:be:25:81:0e:e2:34:47:4e:b6:8d:a3:9a:d3:
de:5d:48:11:73:12:1b:36:3f:55:0a:ae:c1:ab:0b:
ff:08:07:dd:f1:68:1f:5f:74:bd:ef:94:db:fe:1a:
43:e6:a3:e8:bb:03:5f:f3:85:5a:a6:fd:e3:2c:aa:
89:14:3f:ca:e2:9d:6f:fd:d3:db:b6:49:a9:bf:16:
08:32:6e:19:ed:79:87:4c:0a:cb:12:51:eb:12:f8:
d1:11:c6:f8:0b:f4:58:90:10:0d:c1:e6:9a:68:ca:
b6:f3:5b:be:e6:1a:43:7e:b8:91:9a:68:5c:8d:59:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.211.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d2:7f:39:f8:bc:82:2a:d0:40:1c:4a:4c:f7:72:6e:c7:14:
80:f9:89:63:fa:df:f2:66:61:f5:a1:14:38:32:a3:7b:f8:29:
34:ac:ed:7e:71:14:16:fb:4c:28:3d:c3:b9:9a:08:64:6d:1f:
79:b5:83:6d:ba:92:ab:fa:b1:7f:db:51:9c:8c:56:e4:f3:25:
96:38:d7:24:7a:f2:a0:fa:05:6e:a7:a4:b8:ed:a5:fe:73:8a:
ea:e7:b2:aa:ac:6d:7b:d2:6d:c8:22:96:26:da:5d:af:12:d5:
bd:6d:64:4d:d7:bc:cf:20:9e:b4:23:ee:b6:5e:9e:1c:5c:1d:
09:bd:94:21:e9:ee:5d:d7:6f:17:be:78:c9:4e:95:31:8e:3c:
a8:71:e4:21:8b:ec:fd:7a:94:a4:99:aa:0a:dc:8a:24:8c:f9:
06:9b:8b:ae:ac:ea:41:f3:d6:59:56:6e:5d:14:ca:91:c5:69:
fc:ba:74:6d:16:2e:eb:8f:e0:df:19:af:3d:04:45:64:fa:08:
09:58:28:a9:39:d7:7c:f0:5a:7a:ad:63:57:fc:46:1d:2f:98:
f3:49:0c:12:82:8d:cc:b0:d1:b5:b0:ae:f8:8e:47:2a:e9:fa:
66:cc:2b:9c:61:07:d6:f3:bf:90:19:1d:14:b3:2f:82:dd:3d:
95:50:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:15 2026 by rpki-client