
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
File: pYrazvnSRVOlVka1puvM6rGfL7w.cer (raw, json)
Hash identifier: yK1EUXLqAdfa4c5zwiHOm6PQZ6s5y5riRyUWG0dtymA=
Subject key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8469
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Nov 2026 13:47:00 +0000
Certificate not after: Mon 01 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 04:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33897 (0x8469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 2 13:47:00 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:4b:56:7f:9d:cc:25:26:e4:fd:d1:02:b9:
0a:65:b7:db:32:d1:cd:fc:06:b4:9a:53:d6:b8:39:
5f:26:ef:21:48:3f:94:78:a5:5a:f1:1f:42:db:7a:
e0:0d:8f:59:0a:47:5e:00:b6:09:fb:20:23:db:b5:
8b:c7:9b:96:f8:19:c3:19:d4:9c:30:9d:c4:d1:1d:
9b:00:6b:15:24:2b:23:d2:4a:5b:7a:e2:08:00:46:
2a:33:99:d6:51:05:4f:0d:42:0e:96:1f:e8:b3:0b:
a3:c8:1b:e7:77:ba:38:49:e2:bc:70:ab:c1:5b:f5:
20:31:fc:a6:11:41:0a:e2:74:be:5a:fd:55:e4:94:
95:00:7b:5d:07:71:c9:05:2b:74:0e:36:d1:c6:ca:
22:e6:3d:01:65:53:d8:f9:90:92:75:39:e8:91:be:
3e:2b:bf:04:83:7b:7b:ae:87:67:27:e3:4c:ee:01:
c4:f6:ee:52:96:23:27:d0:0a:0b:b4:cf:f6:58:1c:
06:bf:96:24:76:34:86:68:0e:67:b3:92:53:60:e7:
9d:96:72:e6:51:2f:9c:b6:4a:75:73:46:b4:ca:48:
02:12:d7:bb:a7:b0:1a:d3:37:3c:6d:5d:0a:be:1b:
79:e8:c8:7b:96:2b:e7:29:ca:84:82:28:6a:1b:eb:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.188.0/23
Signature Algorithm: sha256WithRSAEncryption
98:58:d3:e7:c9:70:ef:34:5a:e8:39:60:07:31:c0:2a:c7:02:
01:e0:80:ee:8d:59:02:29:c7:61:6b:eb:cd:b4:f5:47:0b:be:
ab:21:e1:c9:60:3b:85:76:e9:cc:d6:ec:fa:06:16:75:c8:20:
fd:64:a1:aa:cc:89:28:7b:79:98:c1:73:fe:f2:5d:1b:6a:ff:
4a:3d:c5:f9:0b:d9:1c:6a:6b:33:88:f0:09:b8:60:9d:4d:a9:
6c:39:e0:89:4f:69:02:24:2b:6d:28:62:6d:60:f8:7a:05:e1:
3d:74:49:28:78:00:64:52:a0:f1:42:3a:a2:e5:97:7d:ab:f8:
ce:66:a9:6a:d5:5d:4c:6d:b1:1d:8a:94:04:97:31:66:da:b4:
4f:fb:36:aa:0d:4c:aa:aa:55:52:76:eb:7b:cf:63:40:0a:b6:
00:26:f7:cf:33:8a:ae:90:2e:62:e3:ef:9d:20:86:cc:20:08:
ef:f5:de:89:d6:b0:d9:93:0b:3c:64:ba:32:a6:1b:33:fa:b4:
3e:41:19:4f:c9:eb:92:eb:eb:41:31:cd:28:9c:90:a1:b4:f2:
ff:20:7f:5e:30:ff:12:29:f0:a3:78:cb:6b:41:8b:9f:2c:b9:
89:79:a4:cd:e7:90:1e:c0:53:75:9d:b7:1e:67:20:83:59:a9:
96:7d:cb:e7
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIRpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTEwMjEzNDcwMFoXDTI3MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZC
NUE2RUJDQ0VBQjE5RjJGQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKaktWf53MJSbk/dECuQplt9sy0c38BrSaU9a4OV8m7yFIP5R4pVrxH0LbeuAN
j1kKR14Atgn7ICPbtYvHm5b4GcMZ1JwwncTRHZsAaxUkKyPSSlt64ggARiozmdZR
BU8NQg6WH+izC6PIG+d3ujhJ4rxwq8Fb9SAx/KYRQQridL5a/VXklJUAe10HcckF
K3QONtHGyiLmPQFlU9j5kJJ1OeiRvj4rvwSDe3uuh2cn40zuAcT27lKWIyfQCgu0
z/ZYHAa/liR2NIZoDmezklNg552WcuZRL5y2SnVzRrTKSAIS17unsBrTNzxtXQq+
G3noyHuWK+cpyoSCKGob6xBtAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUpYrazvnS
RVOlVka1puvM6rGfL7wwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NEM3QS80NEYxNEFGQzQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZu
U1JWT2xWa2ExcHV2TTZyR2ZMN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlY7wwDQYJKoZIhvcNAQELBQADggEBAJhY0+fJcO80Wug5YAcx
wCrHAgHggO6NWQIpx2Fr68209UcLvqsh4clgO4V26czW7PoGFnXIIP1koarMiSh7
eZjBc/7yXRtq/0o9xfkL2RxqazOI8Am4YJ1NqWw54IlPaQIkK20oYm1g+HoF4T10
SSh4AGRSoPFCOqLll32r+M5mqWrVXUxtsR2KlASXMWbatE/7NqoNTKqqVVJ263vP
Y0AKtgAm988ziq6QLmLj750ghswgCO/13onWsNmTCzxkujKmGzP6tD5BGU/J65Lr
60ExzSickKG08v8gf14w/xIp8KN4y2tBi58suYl5pM3nkB7AU3Wdtx5nIINZqZZ9
y+c=
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:00 2026 by rpki-client