Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
File: yaetrryN6_zxSzC3739hOzWzeaE.cer (raw, json)
Hash identifier: 3/vy0yg2QXjK0NF1hOuPgFcbtHRlJE8hciwagcPvUaY=
Subject key identifier: C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8292
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Sep 2026 13:02:47 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 198.17.1.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33426 (0x8292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 22 13:02:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9167352, serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:36:2b:f5:a7:51:ec:f7:e7:73:8d:64:b9:
6d:36:9a:87:53:fb:d7:02:d7:c5:26:0a:c1:6b:1d:
9d:94:3d:79:83:c2:a9:22:61:f5:d0:ff:47:a9:a7:
dc:43:0a:ad:ec:c6:56:9d:6a:d6:c1:5e:9d:f0:98:
6d:6f:83:9f:c3:e5:62:e2:16:cb:a5:97:3a:e1:18:
fb:1c:ac:76:a9:24:b6:ba:08:64:16:20:4e:23:0a:
fc:4d:c8:39:c0:16:61:fd:f3:87:c9:8b:c9:d2:c2:
c4:65:aa:b5:80:4b:f7:0c:c2:e1:09:3b:1b:dd:bf:
3b:da:62:41:0e:68:01:e5:5b:c2:34:cc:3b:ad:59:
93:32:f8:63:a8:b3:45:a0:8f:74:bd:c1:07:ab:fc:
67:c4:4a:3a:49:27:0a:55:6d:0e:e2:a8:b2:8f:f7:
f9:6b:e9:64:d9:55:8c:9e:ff:71:b7:8b:36:40:38:
d8:9b:96:31:2d:69:42:f2:c2:01:58:02:10:87:87:
c0:82:49:b5:6e:d8:b2:1f:62:b3:5b:5a:ea:00:10:
11:f3:69:03:db:34:c8:e8:d1:97:7c:e2:21:17:99:
9b:46:7a:f3:51:99:ac:ea:c8:89:33:db:7f:e1:2d:
44:24:fb:27:38:b7:e3:8a:fe:b1:a3:27:8e:18:c6:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:de:f6:ed:a7:01:2c:46:1f:f6:cf:17:bf:a8:0a:97:64:c5:
67:8c:16:09:31:18:06:93:33:a6:48:53:5c:cd:4e:a6:d7:a1:
88:52:8b:46:d4:4e:de:e8:0d:3b:46:f1:4b:5c:7f:5d:6b:aa:
e1:5a:4d:e6:09:5d:c8:e1:13:b1:11:69:83:7d:f0:75:01:6c:
67:68:ad:3e:53:3b:2c:4a:d2:3c:cc:7a:9a:e2:ba:50:9f:7a:
ea:fe:ef:c9:9a:32:49:bf:8e:5c:36:a2:a5:cc:66:99:42:a0:
40:bb:25:a3:1f:f3:57:af:f7:7a:75:f6:b6:58:d8:bf:8c:9f:
e6:d4:97:fd:07:ce:54:fc:2f:68:bc:59:cf:4b:6b:68:8a:fe:
9d:75:11:af:12:b0:c7:e0:e1:e1:da:2b:34:0d:09:aa:d2:eb:
8b:a6:4c:fa:42:24:de:ce:a4:25:12:cb:37:0f:ba:ea:8f:11:
6c:6d:8a:e1:2c:e5:db:36:24:04:cf:12:2a:32:22:25:9c:15:
5b:56:6d:77:52:9b:04:99:77:80:fe:da:1b:b4:e6:02:01:3a:
a1:aa:5f:89:15:6f:3d:82:1f:fe:48:c4:e4:31:99:d5:17:5a:
cb:b4:9a:2e:b3:b2:f9:10:33:ce:61:32:c6:89:63:c0:82:50:
f2:53:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:43:49 2026 by rpki-client