Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.cer (raw, json)
Hash identifier: GS6QyYbSKrrOfviYxLxnEw4MC7vgdJ+axBzENl+LNfQ=
Subject key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A22C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 04:31:55 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.34.114.0/24
IP: 2001:df5:3c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172588 (0x2a22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 04:31:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:65:ff:5e:76:74:be:93:7d:bd:00:e0:9b:
d6:fd:83:ed:65:8b:10:54:36:f7:ed:02:f0:5c:f1:
5b:7b:e7:e3:e9:8c:60:5d:b7:7b:72:df:a8:bf:ee:
d4:7a:20:83:2a:5e:7b:1c:d7:5b:ce:c8:41:b2:6a:
7f:02:f8:0c:fd:0c:1c:38:a7:71:b6:9d:17:d9:35:
55:4e:92:14:c7:38:63:1d:03:24:91:1c:ce:1a:69:
5f:f4:50:a5:1b:fb:38:c6:87:f1:b1:6e:3f:c8:e1:
bd:cc:1e:39:06:43:c0:90:c5:9a:e9:83:0a:02:d3:
3a:7e:e7:05:f6:6a:99:36:87:e0:5b:fe:e4:5d:50:
ff:d4:4a:fc:79:8c:9d:5b:99:00:c7:7b:5f:11:cb:
f4:28:97:b2:68:6f:21:be:57:e2:be:15:26:ae:19:
4e:e8:91:13:77:52:a8:bc:79:ba:73:06:77:eb:4f:
72:cb:27:da:c3:7a:57:23:b7:1f:54:d2:a9:cb:f8:
18:2e:f0:59:2f:c8:c6:54:ba:8e:ae:24:0b:70:df:
57:eb:b3:44:93:c6:97:0f:6f:10:96:81:49:2c:17:
fc:19:91:86:6c:15:dc:74:c6:e6:8d:6c:43:cc:fd:
f4:ce:4f:77:15:f1:e8:b3:a7:de:fa:e6:16:d1:a8:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.114.0/24
IPv6:
2001:df5:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
93:fb:5a:b6:c2:dc:15:ef:c8:d8:14:71:c7:76:4d:92:83:d4:
c9:33:8e:b4:14:48:ce:07:c8:47:52:84:a0:36:96:c0:9d:13:
e6:de:86:dd:e3:c5:ed:49:cd:c8:53:8d:03:00:4b:94:27:a4:
f9:67:f7:18:4c:07:a8:e1:26:1a:4d:af:87:03:73:4c:5e:fe:
a2:92:3d:fe:66:9d:ce:f8:43:3d:6c:ec:3c:99:0d:a1:29:e3:
c3:e2:fb:de:0f:a5:d0:02:f1:c5:78:1c:5a:a9:22:ba:b3:ee:
86:ff:d0:f8:ca:4c:e1:70:3e:47:f2:50:72:b7:82:c0:59:f8:
09:c5:47:a4:3a:ea:4d:2a:7c:be:2c:67:9d:ef:63:d8:32:7c:
50:50:01:c6:2a:3f:ec:0b:a0:7d:b3:6f:28:97:fa:8e:60:9c:
58:16:f6:89:7e:95:50:93:8b:c0:6c:24:ee:59:10:25:cc:cb:
d9:cc:ff:99:82:35:2d:9b:c9:74:8c:20:2d:97:58:b8:a8:03:
c3:c0:ed:7a:6e:cf:3f:cc:90:22:34:7e:79:67:27:34:ad:0f:
74:10:82:30:a2:bf:85:99:b3:f1:27:eb:63:f0:87:eb:30:0f:
79:44:81:d0:03:bf:61:57:10:19:c8:83:c8:8c:2f:2c:b7:22:
25:4b:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:26:16 2026 by rpki-client