Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.cer (raw, json)
Hash identifier: V/a/OZMe40uPPvROxx0Y8NVgjC2Oe8i6Gv04xvXgTjA=
Subject key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C430
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Jul 2026 14:14:25 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 151324
IP: 103.196.176.0/23
IP: 2001:df2:6c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181296 (0x2c430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 14:14:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:24:5b:61:c1:25:b3:d2:36:88:85:e2:26:
ef:67:c7:63:94:73:88:06:c1:ee:83:d2:ee:d9:a6:
2c:e2:1f:67:34:68:5b:d9:e8:3f:63:ef:cd:9e:c0:
7e:3c:69:48:a9:1a:c0:10:72:05:76:f1:a2:07:e4:
2d:bc:b9:52:66:3b:dd:ea:d8:de:23:f7:d2:d2:e9:
1a:83:60:04:4d:53:72:6c:f8:92:74:cf:bd:e1:cc:
85:1f:ed:14:11:3f:77:a6:b0:16:bf:17:b0:38:0e:
df:e2:3d:f9:d6:0c:dd:fc:51:6e:c0:55:9e:9f:f3:
cc:ad:0d:14:99:40:07:94:d1:1f:aa:a2:56:79:74:
ae:68:c2:6c:ca:2b:50:d2:61:19:b3:33:2e:bc:39:
31:4f:53:2d:ed:52:e0:4c:c9:bb:a0:04:7d:21:31:
04:77:09:9e:ca:48:97:20:44:71:2f:4b:16:85:41:
c4:c6:f5:e4:57:b9:a6:2f:eb:3b:1a:1d:f4:38:47:
85:80:5c:52:22:46:50:bc:b2:50:60:8f:af:e0:f4:
fc:a0:50:b7:a0:45:52:ff:dc:da:24:d4:76:f2:3f:
7a:0a:81:4a:41:7f:7e:10:db:78:2f:c6:02:57:d6:
71:a0:71:21:51:36:32:ef:8c:7f:a0:d3:a0:78:0f:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151324
sbgp-ipAddrBlock: critical
IPv4:
103.196.176.0/23
IPv6:
2001:df2:6c40::/48
Signature Algorithm: sha256WithRSAEncryption
b4:6e:7d:ed:ba:1e:4f:b9:aa:cb:26:27:ab:6d:7e:1c:9a:cf:
0b:d2:1c:b1:58:60:2e:54:4c:ce:29:92:a3:41:a1:50:39:16:
6f:b4:9e:61:24:14:72:61:29:89:30:22:fb:34:ac:41:35:72:
de:12:db:a4:eb:23:67:de:cd:eb:2f:23:87:d8:a4:2b:17:75:
aa:01:6f:69:b5:cb:a8:f1:30:8d:62:a0:11:69:7c:b2:13:9c:
d0:21:07:81:ae:f2:55:6d:f6:33:b4:5e:ec:72:c6:f7:27:f2:
52:e3:20:6e:c8:12:f2:91:b1:63:65:3b:6b:6f:32:22:1e:b9:
8f:51:79:7d:b1:00:0d:44:81:99:00:23:f2:b8:b2:2c:3c:1b:
bb:19:53:8e:7e:51:68:37:59:b4:7a:d5:4a:9b:e6:ee:7b:7c:
a8:0d:e7:02:e7:f3:ff:8f:4e:8a:f2:b9:42:e8:f9:44:2b:b3:
da:f7:14:b1:b0:01:c8:c2:2a:e3:25:86:38:8c:f3:7b:41:ce:
3a:1e:b8:54:f9:f1:aa:3d:06:a0:7a:75:7a:76:cf:f9:cb:cc:
05:41:4e:40:f8:af:fc:cc:61:1b:19:f9:30:ff:d4:bd:a3:dd:
6a:0d:74:e6:5f:0a:2f:5d:10:7e:88:36:76:aa:90:5f:cc:b2:
3a:11:c3:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:01 2026 by rpki-client