Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
File: ry1FO-u_318ptjrBZ1THjRsPy4g.cer (raw, json)
Hash identifier: +YMvoiuydbXfMRHH1Zir044WOqQSSYovFD1S/6egQa4=
Subject key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 15:37:40 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 128.250.0.0/16
IP: 192.43.207.0 -- 192.43.209.255
IP: 192.101.254.0/24
IP: 192.231.127.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27237 (0x6a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 15:37:40 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:87:0b:7e:46:c7:cd:f3:00:ac:84:55:1d:
85:48:3f:3e:11:cb:4d:8e:3c:26:d0:ac:87:17:67:
9c:5f:88:fb:dd:80:9c:fb:9f:05:0a:7b:ce:81:61:
e1:2a:66:44:7f:fa:84:91:c8:5f:99:0d:9c:67:d0:
66:d9:52:00:a6:4f:fd:d8:5d:da:fb:f0:14:cc:bf:
57:39:cf:54:20:9e:f3:81:44:f5:c4:93:42:52:f6:
30:d0:c5:09:b4:ee:cb:6f:45:1c:1d:ae:83:1d:60:
96:c1:9a:b2:34:90:ac:9b:4d:2b:17:bf:18:34:54:
db:5e:44:4f:19:ad:48:ba:83:cb:aa:e1:a4:a6:6d:
e9:56:8d:25:9a:70:1c:31:29:f2:66:63:b8:ea:ba:
5c:23:97:31:f4:44:d1:9b:64:84:bf:75:a2:80:77:
0b:9c:8f:2a:2b:51:69:1c:ec:1e:f9:d7:e9:3d:3e:
1e:75:a6:ce:66:60:36:d2:8e:4b:44:65:d5:95:17:
0a:fa:5f:8b:d1:93:68:4b:6e:86:c9:e9:2c:0c:fe:
10:8c:40:47:64:5e:07:75:34:fe:c9:62:fc:91:c3:
2c:48:14:21:ce:e6:61:44:df:e4:52:c7:33:49:7f:
83:e3:77:cc:f3:4d:b7:4c:2b:12:2f:ed:9d:44:36:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.250.0.0/16
192.43.207.0-192.43.209.255
192.101.254.0/24
192.231.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:34:c5:0d:d2:ff:2e:dc:bc:ba:c0:59:af:a5:d8:fd:88:12:
ce:7e:02:46:2e:25:23:95:c8:ee:be:f8:ff:5c:eb:5f:10:c8:
0f:2e:d8:d3:9d:da:98:12:4f:5b:28:2f:a0:5b:d6:d0:bc:97:
ee:d8:f8:0a:43:52:4d:a6:06:97:e6:fd:aa:ee:1c:1b:5e:28:
fb:f2:69:58:14:d4:7b:6d:83:b8:f5:45:5f:34:ce:16:b9:6d:
81:4d:58:44:a4:67:8b:3a:eb:df:98:47:fe:3f:ec:83:37:e5:
45:90:08:3f:a3:2b:23:19:64:b9:8f:aa:31:3a:c0:69:4f:2f:
c4:5f:da:24:4f:9a:60:6e:9e:60:9e:a3:6e:6d:ea:fd:17:3d:
4b:7a:bb:61:8f:b0:56:03:76:07:98:dd:90:e3:d2:f4:76:a0:
8a:3c:59:45:ae:51:7b:2f:23:e9:8d:5f:58:e7:7b:40:5f:28:
8a:16:0a:bb:38:52:f9:1b:76:67:b6:83:eb:3d:3d:95:50:a5:
86:00:ce:aa:31:c3:21:04:df:f9:41:39:e3:44:cc:5e:dc:bb:
f4:5d:54:a6:b1:5f:4f:ec:89:b7:03:b6:7f:f5:03:90:2a:6b:
86:af:af:73:7b:db:50:e2:9e:cc:14:21:f7:4e:1a:98:e5:ed:
2b:04:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:28:06 2025 by rpki-client