
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
File: YeHcZf1qxNvqavowAYEqsc6h248.cer (raw, json)
Hash identifier: voP+qrqV0NNohUjW4TXCid94szgrhfsBAiR/THIgwoU=
Subject key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C31
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Jun 2026 03:44:42 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.191.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31793 (0x7c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 1 03:44:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:5c:57:cf:98:d3:3f:34:56:7d:d6:36:dc:
f3:53:26:dc:d1:dd:a5:ae:73:cb:25:8e:d7:60:a3:
5b:d5:e4:07:f3:12:b7:b2:cb:d1:eb:f4:ec:ee:07:
45:04:4e:70:f5:37:63:33:da:5a:8e:53:5e:7c:4b:
35:7a:f2:c0:46:20:05:04:d8:1c:b8:78:ce:03:ce:
41:a1:74:bf:3a:5d:a3:0f:e4:3b:dc:48:c3:b4:10:
a9:cd:c5:3f:36:a3:23:9e:11:61:26:19:64:d0:4e:
89:31:5a:66:99:d3:e6:06:21:ec:74:68:12:be:31:
cf:73:28:b2:d1:08:14:6d:64:26:0d:f0:61:fd:d0:
91:f5:ab:cd:34:f7:22:85:84:ce:cc:b5:25:87:c0:
a9:b8:a2:b2:67:af:37:00:4c:44:fe:56:ed:58:db:
41:97:2e:d5:3b:a3:2d:ca:43:e1:0a:bb:57:4e:bc:
72:ac:a3:13:ab:9a:1d:6e:c3:a7:b1:8e:c2:28:6e:
74:01:f8:f7:94:35:4a:f3:b7:e1:8d:dd:3d:2e:72:
6a:43:84:53:8f:7f:1d:f7:be:45:59:43:97:03:d8:
0d:0b:50:be:78:25:f2:e9:68:3f:b6:f7:63:bb:26:
ef:82:c2:0b:37:9a:1c:b7:a6:25:24:2a:68:89:e9:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f7:3b:bc:08:3c:dd:b3:9e:b7:9b:d2:b2:0d:a7:bb:21:57:
49:08:9d:e9:12:12:e3:26:01:1d:9f:ab:2e:73:37:99:92:79:
6d:bb:5c:16:3c:57:92:5d:6c:1a:ef:ab:cb:4d:06:5a:aa:a1:
c3:53:b5:e0:05:db:d0:48:f7:57:f5:3c:79:4f:3b:24:d1:67:
7f:2f:c6:f7:66:00:4a:a6:d8:34:c4:1a:63:15:3c:86:f7:54:
40:75:be:12:2c:e8:46:9e:a7:d4:31:ed:ab:38:04:81:73:43:
d6:3f:61:3f:d0:da:48:67:c4:2e:38:fc:ea:15:a3:f5:7d:41:
fd:c2:c8:f0:27:9b:c9:97:30:5a:4d:c4:ed:e0:37:4e:26:cb:
12:8d:4b:fc:ed:51:31:3e:d1:69:40:8b:ba:9d:d3:3b:6d:aa:
c7:9e:2c:41:4b:56:5f:7d:1d:18:f9:97:0f:98:0a:f0:70:94:
d5:73:06:f9:e1:6e:60:72:50:80:79:2f:36:44:60:2b:0b:c8:
21:0a:f4:fd:36:65:8c:f7:c2:3c:62:54:35:ec:b9:16:27:86:
18:25:46:74:ce:4a:bc:86:83:26:f0:e8:fe:4d:03:d0:dc:c5:
83:8e:5c:82:bc:b6:45:a6:3f:1e:17:ef:ed:fc:a6:bb:74:40:
a2:93:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:37 2026 by rpki-client