Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer (raw, json)
Hash identifier: hr03rHSyrNRjtC4lg7a0padE8MoT2PlJhX3CCIPcHpM=
Subject key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DEE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 13:12:57 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32238 (0x7dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 1 13:12:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:e5:49:33:b9:91:e0:54:bb:0b:ed:ab:1d:
76:c3:f8:5f:8e:72:54:68:3d:c8:0e:a4:c2:0e:c5:
49:94:1f:83:fb:1d:7c:23:03:ee:85:8d:8e:87:fc:
e5:17:02:ff:de:59:47:47:35:95:f9:77:26:b9:f0:
58:0a:3c:33:b0:ce:3e:fd:59:8b:11:1e:37:96:48:
c3:cc:65:fb:65:26:ed:b6:e5:f8:e1:e6:5e:e4:8e:
70:28:1f:4c:10:e1:4f:8f:e5:a4:10:97:f8:08:2b:
b0:97:0a:0d:c7:59:c7:c5:13:a6:8a:58:0c:bb:71:
3d:0d:c4:f7:b8:11:3e:05:89:51:5b:bb:8b:c5:cf:
2a:e6:82:6a:e6:2a:26:46:43:2a:4f:a1:07:c1:00:
18:83:35:b9:b8:20:a3:3d:33:32:e8:2b:5a:f3:25:
5e:3c:fe:c4:c1:da:6f:02:27:cd:9e:c3:8e:17:b1:
46:75:75:6a:cf:87:34:b7:a9:61:c5:a2:27:bd:bc:
42:62:d6:39:db:28:24:cf:98:f6:7a:11:75:41:f6:
91:ff:6b:c5:6d:65:6e:0b:0c:3a:f9:99:9b:07:be:
50:5e:0c:39:d2:05:c1:cf:4c:9c:a2:4a:08:f0:fa:
50:94:3e:65:d2:4a:da:85:f5:f4:a4:92:e9:89:55:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.107.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2c:30:71:95:cb:22:38:f5:c6:e8:fa:ad:12:cd:d5:0f:24:
1f:c3:85:75:ad:d7:d0:7f:10:e5:0d:ca:c3:99:84:a8:40:f7:
b1:bd:b0:bd:c1:93:31:3c:18:ed:69:8a:ec:5d:b7:c4:26:ba:
88:b6:64:47:37:32:5a:0d:51:80:ec:50:c7:38:8c:23:dd:fa:
6a:38:61:9b:77:4a:41:30:67:f1:af:3f:cd:b5:51:f0:ac:a5:
94:73:12:0a:96:23:bc:fe:e8:d4:60:b9:ae:51:66:29:e7:61:
dc:5a:18:cf:66:a4:51:07:5c:0a:f0:4b:7f:c9:dc:7f:6c:f8:
4c:df:46:00:4a:fe:ed:0d:8c:0f:e5:8a:88:54:1f:f6:10:2c:
8f:8e:96:71:8e:b3:fa:78:36:aa:f0:32:00:7a:4b:20:17:ac:
10:08:2c:be:7c:db:8a:61:72:96:28:33:01:9d:65:04:94:df:
b5:31:b6:a8:7d:d6:a4:d4:e5:6d:78:5f:f3:fb:42:c9:1e:9c:
0f:f8:1e:ca:4a:f1:38:4b:b7:05:7f:ee:5d:00:88:0d:89:28:
e8:e5:4e:c1:14:69:6b:0f:0f:b4:33:35:bf:2e:2f:c2:de:d1:
9d:a7:80:8b:32:f8:9d:e6:90:86:57:82:8c:11:eb:68:cd:47:
12:98:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:25 2026 by rpki-client