Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
File: FYOTMKge2Jkgc6I4BMn1kFOPudI.cer (raw, json)
Hash identifier: IDL4V5hli7jVjKQ3oHAnCOQYA8VC4rmdzutmsqjf9SE=
Subject key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Mar 2026 03:42:40 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30933 (0x78d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 23 03:42:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:c6:df:e2:a6:fc:c3:86:20:4c:52:c0:dc:
aa:39:5f:f7:7c:46:9a:e5:55:6d:f6:fc:2e:90:3c:
ef:c4:fa:31:0b:5e:d3:5a:c9:67:3b:56:0c:7f:5f:
41:73:3d:a7:4a:44:7f:ff:da:f6:98:3c:e5:13:e1:
1b:ca:7b:ea:b9:36:a0:7b:ac:79:9d:97:2e:0d:d7:
7f:96:d5:c8:21:04:39:23:11:58:c7:99:b8:71:2e:
5f:db:bb:c9:64:0c:8f:77:8a:86:6a:89:02:24:da:
db:45:0a:4a:a1:7a:3e:14:68:55:68:70:da:0a:e2:
5e:6c:26:a5:22:2d:c1:47:12:f5:fd:78:ca:38:c5:
40:cb:37:92:07:83:1d:b0:4a:c7:28:f5:5f:77:08:
1c:76:6c:93:b9:7e:72:79:55:c0:04:7e:76:70:a0:
6b:4f:a6:86:f5:5d:c1:6a:81:84:fe:cc:89:e4:94:
38:62:6e:44:5f:17:52:5b:09:cd:04:9e:31:32:f5:
09:8c:43:d1:0f:10:85:e1:dc:39:c2:97:95:69:ae:
ab:dc:5a:b5:d5:6f:aa:22:f3:be:f5:db:13:48:77:
d2:1a:41:7c:ae:1c:9f:fa:59:59:24:a0:21:c7:23:
e0:ed:15:8a:68:c1:22:99:0e:e4:bb:f6:11:44:3d:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.74.0/23
Signature Algorithm: sha256WithRSAEncryption
53:3e:6e:aa:fb:dd:31:f0:00:8f:69:30:86:af:4d:b7:08:0a:
2b:b7:81:3d:3b:a8:b6:5b:79:f7:77:d2:b0:60:28:56:a6:00:
48:1c:cc:91:15:f6:7c:14:0f:e3:98:d6:a6:3f:44:90:f9:1d:
1d:ac:2d:1d:4c:30:41:56:d1:26:7d:d5:bf:50:80:bf:46:9d:
9c:a9:3a:ff:d2:c0:db:bb:2d:ed:0e:07:11:42:fa:33:50:b3:
1f:86:56:8a:67:a0:b0:0a:c3:65:cf:92:8b:f0:86:c5:ba:eb:
36:a8:d0:dd:24:68:8f:96:6f:26:47:13:ee:bc:cd:49:f5:7a:
10:89:82:e3:85:a2:13:74:2e:0e:6f:93:1a:67:95:4e:b5:9f:
8e:43:d9:7f:71:d7:00:a0:bc:57:24:17:af:fe:5a:48:18:de:
28:79:7e:40:a4:9f:68:7d:22:fb:70:89:20:1d:6e:83:03:5d:
80:26:59:c2:4e:ca:f2:6e:80:ba:27:6d:53:f2:49:0d:bf:a6:
03:4e:11:22:d9:dc:fd:50:0a:83:9d:7b:9a:57:d0:f4:1e:e8:
31:f8:58:ee:29:2b:9b:e5:fc:c8:9e:05:c1:55:78:c4:8c:74:
4a:d8:d9:23:71:a7:74:61:e6:71:d2:41:fa:11:65:f5:ad:8f:
d8:d2:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:39 2026 by rpki-client