Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
File: YhmdhUkwna_yWfpPdr5svUb3VDA.cer (raw, json)
Hash identifier: DExPOsJrtv36rkfl+OnUd4Wda1huF70GjTThosBRbGE=
Subject key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AE9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 May 2026 08:27:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.43.174.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31465 (0x7ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 5 08:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:0f:e3:72:46:cf:10:a2:f3:54:46:6d:68:
f6:2c:48:94:ac:00:de:ca:3c:f0:ac:a6:a8:36:31:
f7:b0:5a:4c:87:2f:6c:5c:ed:d5:72:fa:11:d6:54:
0b:dd:f0:9a:37:28:df:9b:8f:6f:73:64:44:13:94:
46:e0:65:85:5b:99:e1:94:1b:34:59:cc:49:c4:48:
86:c7:57:6a:25:83:53:29:f9:40:6a:1e:90:82:f8:
a7:24:3c:be:da:ac:51:12:32:12:7e:a6:09:e2:dd:
62:dc:28:17:71:61:b7:6e:29:09:d7:48:ad:d1:c3:
c6:65:1e:03:de:70:ea:3e:2f:82:00:0b:16:16:f4:
28:4a:d8:b0:6b:f3:5f:00:1a:69:45:bc:1b:f6:7a:
f5:43:b3:08:88:4d:3f:5f:ee:bb:65:7e:6a:aa:eb:
8f:5e:c6:18:e1:4b:9f:fd:cd:77:60:71:ce:95:b0:
1a:6f:d4:41:60:34:09:b8:85:df:c1:ec:90:f1:14:
7b:88:66:5e:d9:9a:67:ac:60:46:28:5a:51:56:b1:
b7:7c:b1:fe:85:69:2f:78:e2:91:c0:a3:0a:17:e8:
6f:c6:1a:4e:31:90:59:4f:e2:7a:c4:38:87:f3:a0:
b3:4d:aa:fd:9b:45:a7:1f:91:23:8e:43:51:8f:69:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.43.174.0/24
Signature Algorithm: sha256WithRSAEncryption
03:55:03:5e:51:12:6d:c9:e1:d3:03:b1:19:cd:56:1b:2f:ed:
85:d4:c7:64:88:ce:f9:aa:c4:46:1e:c5:4d:74:13:92:ef:88:
ef:e9:f2:f6:24:97:28:9f:97:03:e8:48:d4:94:56:5c:32:5a:
9e:b6:ec:d1:bd:58:5e:50:09:77:57:13:ce:fc:52:d8:42:5c:
22:c4:37:33:85:c0:a1:13:d7:9a:d5:97:38:dc:2a:41:a0:60:
bd:27:5e:91:af:4f:32:8d:b4:c1:b1:b0:bb:36:f8:20:c4:75:
ad:49:50:2d:6b:92:20:79:d3:b8:f3:f0:f7:9c:9d:42:9f:89:
fa:24:6e:0b:d8:c7:e8:00:2b:0e:af:86:7c:1b:91:9a:aa:b5:
f0:53:3d:2e:7d:6d:5e:04:50:e3:2f:a9:59:e7:5f:34:12:ab:
be:55:7f:54:17:af:95:19:67:85:cd:02:95:78:aa:d9:f1:ef:
aa:32:80:d8:53:8f:ea:26:90:51:c8:6e:49:a7:a6:cd:14:03:
f3:95:15:3a:1f:88:25:22:04:d7:8e:6b:4c:4f:40:58:03:83:
f4:6e:7c:4c:17:46:23:5f:5f:cb:0e:2f:30:23:8f:e7:f1:0a:
3e:74:b3:53:39:9b:82:98:c4:14:3e:94:8e:ad:fc:13:8d:b7:
12:6e:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:57 2026 by rpki-client