Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.cer (raw, json)
Hash identifier: 52YKBEf1Sxpyse5D5aGJnN2Ow5jBqH8/YQKxbf+qT5k=
Subject key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AAA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 03:30:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.127.0.0/16
IP: 130.220.0.0/16
IP: 192.43.226.0 -- 192.43.229.255
IP: 192.160.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31402 (0x7aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 1 03:30:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:70:68:e3:1e:96:74:b1:95:e5:34:d6:cb:
2d:9b:3e:de:86:8c:41:5a:42:b7:83:98:d4:8b:73:
32:23:6b:ae:eb:cc:46:9b:e0:f7:fe:e8:c3:e1:d1:
58:83:02:e8:f1:65:88:ad:76:55:29:5b:2a:dc:4c:
01:49:94:cf:bd:7e:e5:a6:5c:ba:1d:a7:d0:2b:47:
9d:9c:d1:29:06:7c:70:c8:10:9b:89:4f:a1:30:09:
98:c0:bb:34:e0:bb:67:fb:cc:7e:9e:95:8a:7c:23:
58:3d:ce:27:74:47:60:16:7c:97:af:b8:db:ce:16:
76:69:71:cc:19:5a:58:e3:19:7d:a7:ea:1c:0d:ae:
a1:06:a9:97:9f:07:ae:3e:90:9d:81:d7:f4:eb:b2:
04:e2:09:e9:c9:09:24:c6:b7:67:89:cd:b3:b7:b3:
a2:92:1c:5f:11:60:a8:c3:de:b4:22:70:be:ae:a9:
22:38:b5:ca:80:26:ff:26:99:78:0a:77:92:6c:84:
77:b8:a3:18:9d:75:ea:99:9b:2f:13:f6:da:0d:74:
06:84:77:16:45:f4:94:89:38:dd:5e:82:27:b9:0d:
3a:eb:29:68:bd:26:1a:34:fa:69:3f:a5:76:69:85:
c7:68:30:ff:9d:1e:d1:cc:5c:2c:4a:41:25:94:b9:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.127.0.0/16
130.220.0.0/16
192.43.226.0-192.43.229.255
192.160.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:6e:eb:21:92:b0:72:17:31:13:64:35:59:e1:5e:fb:bd:84:
4a:b4:aa:e0:68:97:0e:35:6e:c2:04:73:51:24:06:79:2a:36:
0b:10:d1:2b:3e:fc:ce:86:4f:e4:5a:db:81:eb:37:38:03:81:
24:a7:f8:45:d7:a2:ed:4c:cb:31:7d:21:f0:54:8f:f2:2c:b6:
00:2a:e3:2a:7f:17:97:76:b8:64:33:7b:84:7b:35:8e:0b:d7:
e8:ba:82:38:fa:d0:c6:f6:8a:50:65:e9:98:89:9d:1d:53:85:
27:cd:73:d4:38:3f:9c:1c:ce:53:97:36:bc:39:e4:38:c7:ce:
0e:61:8d:5e:02:7a:82:6e:8a:02:5e:53:74:03:6b:24:1a:9b:
33:5c:1d:7f:84:09:05:a9:86:01:a4:3a:02:f9:61:bc:fd:14:
4a:55:6e:9e:e4:64:e3:ea:b3:ea:43:f6:44:de:33:c9:33:82:
84:a0:98:02:8a:b7:19:03:51:e6:58:d7:54:a2:0b:63:c2:78:
3d:d8:32:2e:73:32:b7:4b:b3:3a:aa:c7:56:19:be:6f:b4:89:
64:60:6f:f8:f4:ab:d0:78:50:56:0d:04:3a:72:ec:40:86:42:
a2:c6:39:bb:a4:79:48:4d:9a:b2:5a:2c:d1:0e:50:36:4a:38:
cd:f2:ee:77
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgICeqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTAxMDMzMDMyWhcNMjcwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDRTVBNjExMC8GA1UEBRMoNjJEREMyODVEQThCM0UyMDlFQjAwRUFB
MzY3MTg0NURBQTZDRjI4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APBNcGjjHpZ0sZXlNNbLLZs+3oaMQVpCt4OY1ItzMiNrruvMRpvg9/7ow+HRWIMC
6PFliK12VSlbKtxMAUmUz71+5aZcuh2n0CtHnZzRKQZ8cMgQm4lPoTAJmMC7NOC7
Z/vMfp6VinwjWD3OJ3RHYBZ8l6+4284WdmlxzBlaWOMZfafqHA2uoQapl58Hrj6Q
nYHX9OuyBOIJ6ckJJMa3Z4nNs7ezopIcXxFgqMPetCJwvq6pIji1yoAm/yaZeAp3
kmyEd7ijGJ116pmbLxP22g10BoR3FkX0lIk43V6CJ7kNOuspaL0mGjT6aT+ldmmF
x2gw/50e0cxcLEpBJZS5LOUCAwEAAaOCAwswggMHMB0GA1UdDgQWBBRi3cKF2os+
IJ6wDqo2cYRdqmzyhjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U1QTYvQUFCMzNFNEM1QjNGMTFFRThGMUQzRDZFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNFNUE2L0FBQjMzRTRDNUIzRjExRUU4RjFEM0Q2RUM0RjlBRTAyL1l0M0NoZHFM
UGlDZXNBNnFObkdFWGFwczhvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA3BggrBgEFBQcBBwEB/wQoMCYw
JAQCAAEwHgMDAIF/AwMAgtwwDAMEAcAr4gMEAcAr5AMEAMCgRzANBgkqhkiG9w0B
AQsFAAOCAQEAxG7rIZKwchcxE2Q1WeFe+72ESrSq4GiXDjVuwgRzUSQGeSo2CxDR
Kz78zoZP5Frbges3OAOBJKf4Rdei7UzLMX0h8FSP8iy2ACrjKn8Xl3a4ZDN7hHs1
jgvX6LqCOPrQxvaKUGXpmImdHVOFJ81z1Dg/nBzOU5c2vDnkOMfODmGNXgJ6gm6K
Al5TdANrJBqbM1wdf4QJBamGAaQ6AvlhvP0USlVunuRk4+qz6kP2RN4zyTOChKCY
Aoq3GQNR5ljXVKILY8J4PdgyLnMyt0uzOqrHVhm+b7SJZGBv+PSr0HhQVg0EOnLs
QIZCosY5u6R5SE2aslos0Q5QNko4zfLudw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:00 2026 by rpki-client