Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
File: rYQ8jfSRtv8A6PnztRksOZYqSM8.cer (raw, json)
Hash identifier: FjT/J+NOKKVy/6ELgJ+IdePoX+a+RJmhM1bnKfRCaG4=
Subject key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 804D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 16:33:43 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 04:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32845 (0x804d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 16:33:43 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:e1:ac:1e:87:66:4c:d1:84:71:12:de:d2:
6a:b6:2a:c6:d7:20:db:46:b0:88:8d:b7:e2:92:99:
8f:8e:7f:49:e9:ac:c2:75:86:bf:75:13:57:a7:40:
7b:cb:48:e4:aa:c2:95:25:8c:1a:ca:d9:35:38:b2:
ef:49:69:0d:9a:df:1d:2f:66:32:42:41:2a:dc:7f:
55:e0:82:c0:0d:e9:16:bd:34:05:11:44:27:1e:9d:
85:a9:9a:d9:5d:ba:81:e1:d9:56:96:29:b4:b3:4d:
76:05:26:09:4f:16:57:44:9a:a6:94:7e:61:34:5f:
8d:53:c5:b0:71:fa:e8:7a:74:63:95:c7:36:ee:de:
b1:f6:1a:c8:6f:ba:93:95:db:90:88:35:bc:88:d9:
e0:00:b2:73:fe:e3:51:27:39:66:55:38:ce:bd:85:
1b:b7:a7:08:c1:80:58:ea:e4:4f:7e:91:79:8c:1a:
e1:a2:bf:78:9f:4b:f8:22:db:ce:ca:d0:70:30:15:
81:a9:ee:cb:09:52:0d:c2:8b:b9:01:8d:fa:ce:bb:
3f:22:49:bc:0e:8a:a8:45:8a:5c:8e:b5:68:15:f4:
c3:b1:7a:b9:7c:dc:4b:6d:9e:bc:3f:9c:52:a6:4f:
67:80:b5:60:82:8d:78:09:ab:38:21:e2:57:a4:e0:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.90.0/23
Signature Algorithm: sha256WithRSAEncryption
69:fb:b9:72:8c:d2:30:0e:b5:be:80:b9:61:d9:0a:90:73:c7:
2d:a9:a9:40:de:89:9a:de:ba:fb:ad:8c:69:b3:73:36:53:d3:
a0:a3:a2:85:3f:97:39:16:0d:73:b3:98:4b:a9:e9:0b:e0:e3:
aa:c6:49:19:03:61:f9:29:02:f2:72:83:9d:bf:1e:42:d4:9f:
d8:b8:34:ba:a9:c5:dc:c5:a8:91:0f:65:e8:17:ad:62:a4:e9:
61:1c:e3:f7:c9:c7:49:0c:c4:81:f8:78:60:67:a8:0f:32:c6:
44:68:ab:d7:de:de:65:82:39:87:80:75:e7:b6:07:c0:c1:c7:
13:8c:c8:f0:60:a0:a1:1e:b9:25:70:f4:29:91:f1:a7:88:27:
77:98:99:ca:5b:a3:2d:9d:21:50:94:67:42:5a:15:1a:d7:21:
1d:94:61:4b:19:09:cc:87:d7:9d:3e:6e:9b:0d:3c:56:ee:37:
41:9c:27:8f:ce:eb:f1:99:f4:ec:da:b0:98:a4:9b:d1:c3:f3:
f9:15:6e:94:72:c7:e0:e4:10:be:ab:d3:0f:fa:5a:9c:4a:43:
f7:1b:be:94:4f:21:30:9a:87:75:22:64:ec:9f:f1:67:fa:c9:
60:a6:f5:5f:f7:6d:2c:2a:bb:37:a1:b6:66:c1:50:47:ec:bf:
07:1b:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:38 2026 by rpki-client