Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.cer (raw, json)
Hash identifier: OL+nwmRZnsizdJPHCBfk+6WrNuTfEJypf2D6BF1t0/A=
Subject key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8272
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Sep 2026 13:43:37 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.8.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33394 (0x8272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 18 13:43:37 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:06:e8:d2:ca:8f:9e:d4:5d:c4:c8:2f:a6:
cd:71:db:b0:7d:ad:37:a8:40:ed:9f:55:ad:df:0a:
e3:19:57:a9:f7:dc:8c:27:a6:e2:09:ad:5f:9c:60:
93:46:a2:bb:df:5f:fb:78:26:97:24:73:40:db:0f:
90:3d:19:61:47:46:2e:6e:51:ca:32:7b:51:50:62:
12:ea:a8:34:5f:3e:88:d3:8a:0a:07:72:ac:30:ee:
26:e7:6d:b1:7e:2a:31:f0:46:cd:7e:a9:d5:d9:0c:
4f:7d:f8:32:4d:35:76:46:06:0e:f9:2f:79:31:70:
fc:fe:d3:0e:fa:20:09:b2:da:dc:cc:c6:0a:35:75:
f6:74:d1:e6:e1:8c:b8:92:9e:8d:35:8c:e6:e3:e5:
44:df:e7:8d:b6:88:57:d6:73:b0:6c:23:0f:f3:39:
97:fc:ab:c4:42:89:ef:e7:d3:73:f7:2e:ca:a4:38:
3f:82:ed:ac:6f:60:8e:74:5d:44:59:24:e2:b7:0f:
ab:20:b0:4b:0a:93:e1:64:7e:a6:23:68:51:1f:3e:
4a:e3:21:4a:22:69:21:04:d4:9a:82:70:b0:0c:f5:
f6:8e:eb:46:a7:ed:3f:68:75:6b:08:e9:b9:da:f2:
6d:35:07:32:ad:0a:3b:b7:16:f5:dc:2d:d2:29:c5:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:93:91:dc:2c:5a:ce:be:04:a1:40:e4:1f:96:a0:b2:9f:08:
64:1e:9e:ff:e8:94:8b:1d:42:a5:ac:6e:13:64:25:c6:62:34:
db:39:bd:d8:c9:55:e5:8d:1f:db:c7:22:f6:13:1c:e4:d4:dc:
ee:20:82:91:f3:71:a1:65:08:15:eb:eb:9d:09:e6:bc:29:fb:
5b:05:b0:04:93:a7:30:ba:79:90:0c:9c:f6:8a:b3:08:78:89:
b0:52:54:a5:d9:c0:b3:25:9e:d2:31:72:25:73:a8:d4:44:75:
ac:9a:a0:ea:f4:1d:85:ff:6f:b1:0b:67:ec:1a:76:d9:81:f7:
10:83:f9:46:d0:34:4a:db:f5:11:66:ef:39:a1:0b:97:75:53:
41:3e:d3:35:d8:05:95:95:ae:d3:42:54:44:f5:c0:7b:dc:75:
01:02:b1:cf:4f:d1:6a:24:00:bc:58:d3:46:86:d1:03:f7:35:
c2:a1:26:c9:3c:47:5c:7e:fb:95:88:6b:71:29:25:79:bc:f1:
92:a2:b0:b5:1f:7a:34:44:ef:bf:4f:eb:9b:56:76:b9:5c:48:
88:f4:08:17:0d:17:e9:b8:bb:93:56:cd:cb:13:9b:6c:11:09:
ae:c0:50:92:90:a7:13:92:83:cd:60:a4:90:92:b6:a3:c6:de:
e2:93:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:51:41 2026 by rpki-client