Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
File: yy5uwVWepHY5RAtAqtdfleb9vF8.cer (raw, json)
Hash identifier: 4Z6327vrgQPlEeRLbU2C6dcAoeAOEB2XfJ7/hArPLzw=
Subject key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A13
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Aug 2025 03:32:29 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 155.35.46.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27155 (0x6a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 21 03:32:29 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:10:07:f3:86:04:08:75:2e:ae:ea:a0:aa:
96:88:19:15:cd:5f:c6:df:5c:66:b6:d6:59:6c:73:
ad:fb:1d:9c:63:d0:27:32:91:f7:97:f9:e6:91:bd:
6c:e2:cf:e4:ef:0d:0b:50:1b:6a:ef:5a:66:14:41:
6c:88:05:67:7d:18:bc:12:f5:c1:51:f7:59:10:d7:
ce:d3:4f:ff:be:2e:0a:c2:97:01:01:47:f6:ec:de:
dc:7f:d6:f8:d1:34:19:91:b3:a5:5e:5a:b3:3c:8d:
3f:dd:68:55:6e:e8:4a:7c:99:32:0c:4c:19:51:98:
4c:e6:39:17:e3:6c:e0:18:98:bc:a9:2a:17:e8:cf:
6a:c5:5b:1d:92:86:0f:bc:dd:b8:25:f4:68:74:20:
aa:2a:9e:10:74:fb:c1:23:10:df:f1:8b:d1:37:19:
a0:da:e8:d4:a6:c1:57:5b:96:67:d4:e9:d3:1c:d1:
d3:09:db:e1:40:86:ec:d0:48:9f:89:4b:b2:de:51:
64:f2:02:25:08:88:2c:6c:7e:ba:d4:da:41:91:aa:
05:0c:88:29:a7:a5:cd:ad:cc:c6:21:f0:1a:e3:e5:
e1:ac:59:f2:b4:9f:37:1e:e6:23:98:9c:23:6d:34:
64:35:36:1e:4f:84:06:bd:17:46:30:68:68:f0:a6:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.35.46.0/23
Signature Algorithm: sha256WithRSAEncryption
49:03:eb:01:4e:7e:80:cf:e7:58:8a:ac:37:d4:ac:5c:80:4d:
dd:82:2c:2f:28:e8:d0:22:38:08:83:fe:47:53:b6:70:d0:3a:
76:36:7a:0c:fd:59:ce:72:b1:1f:de:8a:bc:58:3b:1f:44:f4:
c5:a4:7e:7f:24:7f:92:fb:a6:f6:fc:ce:02:e5:aa:aa:76:04:
17:98:18:5b:dc:7c:78:df:48:b3:41:99:b1:c5:3a:e3:56:6d:
3f:44:75:9a:d2:45:e1:95:8f:f6:02:6e:8d:12:11:f9:48:fa:
25:be:18:6f:c6:0c:7d:51:04:69:fb:10:69:95:2b:12:7e:6f:
ae:9e:ce:2e:cb:c5:65:3b:68:9f:0a:e2:9e:84:19:b3:85:67:
dc:f0:0a:fe:32:0a:bb:99:54:90:7a:56:56:20:c6:27:2d:93:
1b:b6:29:7f:ab:85:86:4e:f4:f4:81:f9:cd:9a:49:a6:96:8b:
a3:09:97:6c:21:cd:05:a7:95:35:89:be:f2:ea:73:d9:77:c9:
7d:8b:2d:2d:99:8f:b7:a3:f4:42:15:da:43:d1:6f:74:b4:bc:
1e:53:6d:84:62:d3:68:d9:ff:20:79:b0:83:e1:07:33:20:6a:
87:c7:d3:c6:0c:27:2b:e1:50:dc:9e:db:45:fc:4e:65:a9:64:
86:6a:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:48 2025 by rpki-client