Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer (raw, json)
Hash identifier: YPilHncJxpdylx+3tM77Prp3hcoLn90RZ5oVv5k756s=
Subject key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 815C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Aug 2026 06:06:29 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.164.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33116 (0x815c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 27 06:06:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:5e:d1:8d:ef:2d:46:9d:ed:e6:45:0c:d1:
b3:16:d9:8e:8f:11:ad:3f:dc:42:d4:85:a7:80:ac:
71:cd:91:17:20:21:b3:93:b7:47:55:15:39:3e:d7:
c9:f8:bb:7c:bc:e3:9b:4b:b0:b9:7a:e4:90:eb:b3:
5d:1d:24:d6:17:99:1e:c1:c8:7c:bc:d6:47:9e:38:
8b:d7:08:71:ef:dc:ad:df:17:b2:57:8c:af:5f:10:
ee:2d:61:7f:ac:e2:49:ed:04:e8:2c:b7:3a:d2:f3:
52:6b:bc:92:cf:41:1a:3a:66:15:02:79:73:f3:11:
5a:50:aa:ba:23:84:a1:6a:82:47:48:07:40:4a:d5:
b7:26:34:53:8a:59:fe:ae:3c:18:f5:47:0c:7a:d8:
58:ef:0b:db:7c:af:41:3c:19:50:f0:b5:8a:e7:4f:
e2:59:71:cd:d9:3b:39:5e:c0:41:48:65:fb:a0:90:
99:e5:b8:e6:9b:a0:13:b7:51:ed:f6:48:6d:45:6c:
84:d8:e6:01:2d:94:95:09:9b:8f:b8:a1:da:1d:c1:
ee:6b:35:54:b9:35:13:0c:08:9b:63:3e:8a:e4:87:
fc:10:2b:1f:97:53:f0:29:db:b8:ae:3a:b0:8b:d7:
35:a7:86:ae:64:ae:b6:e2:29:94:6e:f4:b8:82:6c:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.164.0/23
Signature Algorithm: sha256WithRSAEncryption
62:7a:20:1d:a6:9e:23:0e:70:37:91:c7:18:e3:a6:46:e8:d7:
f7:f9:81:7a:b2:61:35:6d:6d:b8:3a:9b:93:25:51:3e:14:38:
b4:30:28:46:3f:03:07:15:c2:5e:64:db:c0:ce:b9:63:4a:cb:
19:2b:1a:2f:7d:bf:e3:77:f7:a9:8c:2f:b0:63:bc:1b:6d:86:
e8:04:cd:41:20:80:8b:e7:3b:b9:58:78:7e:e4:52:96:a4:7e:
f8:b2:37:d6:ed:79:9c:44:37:f3:a6:16:6a:45:78:24:d9:f9:
b7:31:73:dc:e1:dd:b9:7b:0e:cc:4d:f8:80:48:85:9a:77:da:
03:69:9e:e5:8e:7c:d7:c9:74:6e:be:e8:b9:bc:a2:f1:ce:93:
dc:e1:6f:20:b5:f0:ce:18:bd:d1:05:e5:39:f6:ee:a8:bb:1d:
57:f2:0d:f5:2f:d6:98:53:ad:03:0f:2c:ae:0a:2e:8f:5c:fe:
71:82:27:14:9e:3d:ad:e3:4e:58:6c:10:61:56:52:df:df:df:
82:74:c3:33:75:18:1a:6a:72:99:2e:d3:c1:85:4a:9a:68:80:
d0:f6:ef:0c:20:4a:16:b9:4b:5e:07:78:52:20:d9:44:16:10:
ae:fa:d4:49:c7:0e:5d:11:64:91:a8:cf:49:48:91:5e:07:fd:
25:1e:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:51:12 2026 by rpki-client