Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
File: yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer (raw, json)
Hash identifier: aYQZRVNQeuYnm7Wdxc/KQ9j4eiHGC8PmZYDElQtbUlo=
Subject key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CC16
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 09 Aug 2026 03:41:48 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 153814
IP: 163.227.136.0/23
IP: 203.8.113.0/24
IP: 203.26.178.0/24
IP: 203.34.181.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183318 (0x2cc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 9 03:41:48 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:65:9f:81:9e:1f:c8:3b:ca:b5:a7:63:c2:
ea:81:d1:50:3d:a7:70:84:a6:5c:76:5e:0d:3c:36:
6c:71:37:86:6c:9e:f5:8d:7d:e1:91:c7:df:13:f3:
26:d8:ce:03:ba:46:fc:57:bf:e1:1b:67:54:48:80:
f7:04:90:cc:4e:b9:03:00:a8:1f:5a:51:f3:73:35:
7c:5b:c6:a7:f1:6e:93:2e:f7:db:ae:bd:55:b0:01:
c2:cc:e3:7b:50:76:60:8f:ba:21:54:5d:41:b1:43:
ec:4f:7b:4c:e1:ca:3a:16:07:84:44:32:5d:26:e0:
d0:4b:37:67:6a:6e:bf:b2:45:a3:f4:fa:36:95:a3:
b8:d9:ee:a4:d2:c3:5e:32:5d:f3:12:49:f7:41:4e:
36:39:82:5c:7a:d5:fc:73:b8:b7:e3:8f:18:5a:83:
a0:2f:ad:11:bd:e4:49:50:30:27:7d:bf:1f:94:a5:
65:1b:0f:e8:d0:0b:55:8b:40:18:24:02:f6:d3:db:
a4:e8:37:ae:3c:45:13:df:c5:b0:1a:c7:eb:9b:77:
9e:6d:ac:4f:29:b7:97:41:cf:f5:9c:41:6f:d1:25:
d5:2f:84:db:e5:50:5b:a1:d9:ca:bd:23:d0:c8:9e:
ec:c5:1f:74:e7:0f:f1:c6:29:53:e6:bf:49:42:56:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153814
sbgp-ipAddrBlock: critical
IPv4:
163.227.136.0/23
203.8.113.0/24
203.26.178.0/24
203.34.181.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f2:af:fa:1c:e7:fe:ed:dc:49:ff:54:99:13:3e:49:f5:df:
13:62:07:76:9b:4b:cd:e8:f5:c5:aa:d3:5b:05:81:2a:6d:1c:
f4:0d:ff:e6:ca:fa:2e:e0:6d:d0:cc:6b:10:24:39:11:d6:46:
68:70:41:61:b5:c6:b9:22:ee:3b:8a:9d:6d:7f:80:29:2b:5e:
0b:b4:82:bb:9f:30:ad:24:34:84:ce:46:a7:fd:ad:c0:8e:7d:
0b:79:46:25:ab:4b:89:36:56:a8:4f:71:d8:b6:fa:01:57:20:
4b:4e:a4:6d:89:0a:d9:28:b6:d2:83:6b:2f:42:3c:35:d2:a3:
d9:05:64:8d:18:da:b0:38:ce:85:8a:ee:fb:38:4d:0c:a5:6f:
e6:35:94:c9:00:79:c0:60:60:50:34:e5:54:03:28:f2:eb:9d:
8c:65:10:52:1a:89:3f:41:ed:9b:88:2f:c7:05:bd:8d:67:85:
43:b9:2d:77:8e:78:ec:7f:94:88:6c:72:90:52:08:42:61:03:
c2:ee:cd:92:1d:85:32:e9:18:89:6a:27:06:b3:78:0f:9a:8c:
c7:3a:db:d0:c9:ca:ce:d9:a5:51:84:c6:f2:6c:3d:2a:a6:a6:
e6:47:24:2e:99:d3:b8:64:4e:40:08:fb:35:71:40:89:de:4f:
57:cf:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:02 2026 by rpki-client