
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
File: yaetrryN6_zxSzC3739hOzWzeaE.cer (raw, json)
Hash identifier: Qz3fhiOAQfB4/tzOW3I22eaUtX9P1/Y7jVZrNqPzR6A=
Subject key identifier: C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D92
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jun 2026 04:01:22 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 198.17.1.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32146 (0x7d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 25 04:01:22 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9167352, serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:36:2b:f5:a7:51:ec:f7:e7:73:8d:64:b9:
6d:36:9a:87:53:fb:d7:02:d7:c5:26:0a:c1:6b:1d:
9d:94:3d:79:83:c2:a9:22:61:f5:d0:ff:47:a9:a7:
dc:43:0a:ad:ec:c6:56:9d:6a:d6:c1:5e:9d:f0:98:
6d:6f:83:9f:c3:e5:62:e2:16:cb:a5:97:3a:e1:18:
fb:1c:ac:76:a9:24:b6:ba:08:64:16:20:4e:23:0a:
fc:4d:c8:39:c0:16:61:fd:f3:87:c9:8b:c9:d2:c2:
c4:65:aa:b5:80:4b:f7:0c:c2:e1:09:3b:1b:dd:bf:
3b:da:62:41:0e:68:01:e5:5b:c2:34:cc:3b:ad:59:
93:32:f8:63:a8:b3:45:a0:8f:74:bd:c1:07:ab:fc:
67:c4:4a:3a:49:27:0a:55:6d:0e:e2:a8:b2:8f:f7:
f9:6b:e9:64:d9:55:8c:9e:ff:71:b7:8b:36:40:38:
d8:9b:96:31:2d:69:42:f2:c2:01:58:02:10:87:87:
c0:82:49:b5:6e:d8:b2:1f:62:b3:5b:5a:ea:00:10:
11:f3:69:03:db:34:c8:e8:d1:97:7c:e2:21:17:99:
9b:46:7a:f3:51:99:ac:ea:c8:89:33:db:7f:e1:2d:
44:24:fb:27:38:b7:e3:8a:fe:b1:a3:27:8e:18:c6:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.1.0/24
Signature Algorithm: sha256WithRSAEncryption
60:45:88:32:42:37:68:7c:0e:0c:eb:41:01:1d:fe:5a:aa:dc:
f3:c5:21:79:d3:d1:6e:f6:d4:42:2a:c8:d9:d4:6f:2a:14:13:
9b:09:32:5e:65:08:19:b0:5a:e1:1d:a2:e9:53:51:97:10:6f:
0b:7b:dc:11:66:39:9c:6a:ca:14:e3:bd:67:3a:db:68:82:6e:
cd:8c:ec:cd:30:b9:05:b3:07:66:af:e0:02:73:f4:1c:35:2b:
75:70:4c:9a:b9:31:2b:0d:e0:12:6b:31:48:f0:02:9b:a1:e8:
6a:aa:f6:dd:fd:a0:85:91:86:78:9b:8f:14:a0:00:c8:52:5b:
58:3d:65:83:18:bd:60:f6:53:82:3a:ce:43:f7:b2:1a:e1:c0:
a1:08:38:b8:bd:d3:f7:30:86:66:ca:31:42:6b:ba:bd:20:ea:
b4:ee:df:37:33:a3:7e:84:49:00:35:0e:0f:65:5f:1f:04:7e:
1f:b0:a3:5e:d7:cd:84:b3:6a:3d:20:3a:59:7a:22:8c:1f:62:
0f:82:73:42:f6:4d:13:26:a0:0f:a4:a2:a1:56:6a:7f:95:42:
55:a0:fc:cf:d2:d7:21:db:75:1c:bf:fa:6e:bb:1c:81:0e:68:
8c:2d:12:c2:c5:0d:ec:4e:d1:17:b5:d6:f2:08:1d:92:88:8c:
5e:ee:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client