Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer (raw, json)
Hash identifier: LjEe+n3gwqi4EOo01e+YQwJxmUt4b+0uLY2k/1NaTTQ=
Subject key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7812
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:33:10 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30738 (0x7812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 2 13:33:10 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:c7:c2:d5:7d:11:92:65:46:b3:7e:19:01:
9e:39:c6:8d:21:7f:46:ae:48:3c:3b:ec:9d:46:e1:
0a:a5:ba:ae:58:c9:b7:57:9a:2d:66:ae:d9:11:eb:
9a:c4:7d:11:1d:cb:f0:b8:74:95:ed:20:2d:06:93:
69:fa:85:56:fe:ad:1c:22:aa:fe:0e:b9:f2:d5:08:
ad:01:c8:2c:1d:de:df:78:2f:3d:62:a5:d3:6d:83:
4e:82:21:85:12:3a:0a:5f:ed:6d:05:99:2a:2f:d1:
3b:01:09:05:fd:b5:de:1e:75:79:66:81:a4:4e:0a:
74:e4:37:b4:85:e7:05:18:0e:a8:49:57:1a:36:73:
df:12:74:00:c2:37:38:35:27:64:70:43:cd:10:3f:
e6:dc:61:20:77:4b:c4:6a:1f:d7:8a:7b:ef:36:b8:
0d:d9:4b:e1:af:32:5f:e1:a1:33:f5:f6:80:a8:f4:
d0:7c:d6:29:be:02:2c:a8:86:9d:1d:60:68:e7:68:
24:47:39:35:2b:85:8b:f5:0c:5e:cb:e0:fd:bf:82:
ca:c8:4f:99:89:0a:9c:4d:54:b7:58:7a:8a:61:7a:
df:31:0d:d5:da:55:2a:17:d9:35:20:18:35:5b:0a:
c1:fc:35:8b:03:37:e5:f7:bc:77:d0:29:3f:ba:69:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.162.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:8b:57:02:e9:79:8f:ea:1b:5e:cd:d8:5a:97:59:6d:08:db:
03:90:28:7b:b8:db:4a:da:44:7e:fd:84:ee:6a:3f:4c:9b:b5:
3b:4c:73:2b:4a:16:bc:90:bc:12:25:48:f5:c7:d5:ed:4b:e6:
2d:ce:c0:01:da:b1:b2:66:f2:39:59:f8:4f:62:ce:69:de:a1:
af:46:58:d5:af:0d:4b:00:d9:20:2f:68:fa:b8:b2:7a:e3:89:
50:a5:51:4a:de:b4:35:dd:0d:ff:61:a3:af:05:e5:db:69:e5:
28:c1:34:2d:3a:55:39:52:c5:72:65:99:4a:3c:84:f2:82:48:
1e:81:6c:67:62:97:98:92:51:00:02:f0:b5:23:80:c3:47:a4:
a7:e5:32:ea:37:9f:a6:46:d1:d4:f0:8d:90:94:8e:e6:16:82:
d1:6c:9a:71:a2:6b:19:6d:72:dd:26:9e:62:d2:49:20:aa:cc:
cb:b9:e5:c9:fc:70:77:5e:66:96:46:61:50:7a:8a:b2:03:4a:
77:27:99:0a:e9:8e:f2:64:79:a9:77:34:fa:73:3c:e2:3c:d4:
84:fa:1a:9b:21:59:57:a5:b5:b5:e5:f5:b5:ab:89:f9:01:b3:
e3:52:31:e3:d1:8e:5a:ed:49:7f:34:a9:f3:7e:29:14:28:a3:
29:6a:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:48 2026 by rpki-client