
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer (raw, json)
Hash identifier: TElH2oD/i4iLJQIE4HykaopxjhMBzpU1Vd1EAwOYAWw=
Subject key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C8AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 13:01:45 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 153989
IP: 2001:df5:c640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182444 (0x2c8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 13:01:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:34:b8:c4:7e:15:5a:fd:0b:ad:10:14:74:
41:6b:6d:03:11:5d:e9:cb:55:02:50:d7:90:61:51:
f9:4a:54:a7:47:15:c9:5f:f5:be:3b:f2:c1:74:17:
27:d7:e4:7b:2c:e0:02:49:98:91:d9:68:21:df:48:
4b:9a:91:db:73:c0:1a:57:09:cd:bd:18:5e:59:ee:
79:3a:b8:d0:92:f2:4c:77:fa:9a:40:7a:64:57:51:
a4:a2:8a:47:90:cf:d4:b4:94:50:09:d1:a7:57:e9:
8c:7c:0a:b7:81:d1:dc:3a:99:c3:d2:90:d6:90:52:
f6:56:9a:aa:b6:e3:1c:33:d3:26:16:73:1b:23:7b:
55:32:6b:ef:2d:61:1b:53:2f:a4:9c:f3:bd:11:30:
c3:98:43:6e:83:55:60:01:92:56:ce:8b:08:04:84:
01:51:ee:0d:c6:c9:1b:b0:3b:bc:96:b8:07:dd:23:
5b:3a:ab:5a:70:41:c5:30:98:aa:89:9b:0e:20:43:
cd:af:d9:67:11:8c:db:7e:e9:5a:1f:77:5e:cd:5b:
d0:ef:51:56:82:a2:11:4b:9a:27:01:77:8d:cf:ec:
74:4a:e1:65:79:bc:2e:2b:61:c8:25:9a:2c:75:5d:
5f:1c:bf:92:21:7c:47:22:ce:4c:ce:05:01:35:99:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153989
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c640::/48
Signature Algorithm: sha256WithRSAEncryption
65:a8:0e:cc:6a:93:5b:0b:d0:44:c7:32:76:5f:cf:54:65:07:
d1:76:67:05:26:c0:60:c8:d5:43:87:fa:1c:d2:6a:46:66:68:
14:97:73:18:67:d6:d3:1d:bb:58:9d:ed:f1:82:f7:54:7e:ba:
eb:8a:31:5d:fb:48:8c:f8:ba:79:b9:dc:b4:de:6c:25:c9:bc:
55:6b:72:3a:87:7b:ea:08:42:d4:48:0d:a6:4d:6b:62:56:30:
9b:47:fe:7b:65:de:f2:7c:6a:36:6a:a4:81:c6:41:7b:a7:61:
fa:19:64:b1:b5:a6:9d:c6:8e:08:55:35:60:5c:07:c0:52:e6:
cf:24:3b:98:b0:a0:47:e5:6a:d8:74:67:3b:07:14:c5:b1:fc:
13:29:bc:98:35:23:e6:b3:bf:74:dc:fa:97:b5:44:58:8c:f3:
fb:25:60:2a:48:c7:e9:32:ee:f1:18:18:ab:08:48:45:84:1f:
6c:6b:b1:c9:f4:67:70:ab:39:74:59:aa:c4:77:42:01:d5:ef:
62:de:79:6e:d8:9c:01:19:93:89:ae:b3:5e:6d:d1:89:41:30:
63:5b:b6:12:44:f9:c0:1b:15:5c:5c:44:0e:7b:90:7e:50:70:
c8:46:df:83:0c:93:ce:45:5f:7f:bc:f7:a1:d6:f7:61:3c:80:
4e:36:68:24
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAsisMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDczMDEzMDE0NVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzY5NUUxMTAvBgNVBAUTKDZEODQxNzYxNzI1ODAzOTJCQTJBMzI1
RjcxN0IxRUNBNEYwRDg3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYFDS4xH4VWv0LrRAUdEFrbQMRXenLVQJQ15BhUflKVKdHFclf9b478sF0FyfX
5Hss4AJJmJHZaCHfSEuakdtzwBpXCc29GF5Z7nk6uNCS8kx3+ppAemRXUaSiikeQ
z9S0lFAJ0adX6Yx8CreB0dw6mcPSkNaQUvZWmqq24xwz0yYWcxsje1Uya+8tYRtT
L6Sc870RMMOYQ26DVWABklbOiwgEhAFR7g3GyRuwO7yWuAfdI1s6q1pwQcUwmKqJ
mw4gQ82v2WcRjNt+6Vofd17NW9DvUVaCohFLmicBd43P7HRK4WV5vC4rYcglmix1
XV8cv5IhfEcizkzOBQE1mdBJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUbYQXYXJY
A5K6KjJfcXseyk8Nh5MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM2OTVFL0YwQTFGRTUyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNjk1RS9GMEExRkU1MjUzNDAxMUYwOEM4Njk0NDFDNEY5QUUwMi9iWVFYWVhK
WUE1SzZLakpmY1hzZXlrOE5oNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlmFMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9cZAMA0G
CSqGSIb3DQEBCwUAA4IBAQBlqA7MapNbC9BExzJ2X89UZQfRdmcFJsBgyNVDh/oc
0mpGZmgUl3MYZ9bTHbtYne3xgvdUfrrrijFd+0iM+Lp5udy03mwlybxVa3I6h3vq
CELUSA2mTWtiVjCbR/57Zd7yfGo2aqSBxkF7p2H6GWSxtaadxo4IVTVgXAfAUubP
JDuYsKBH5WrYdGc7BxTFsfwTKbyYNSPms7903PqXtURYjPP7JWAqSMfpMu7xGBir
CEhFhB9sa7HJ9Gdwqzl0WarEd0IB1e9i3nlu2JwBGZOJrrNebdGJQTBjW7YSRPnA
GxVcXEQOe5B+UHDIRt+DDJPORV9/vPeh1vdhPIBONmgk
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:48:40 2026 by rpki-client