Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
File: yl3F7VK2QLF0vjjiadTEniVnTxc.cer (raw, json)
Hash identifier: /trVWUUJRvdoCD+BHKC50pKXqva5QzQ8SiuNQuzzRX8=
Subject key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B44B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 May 2026 14:23:14 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136987
IP: 121.200.56.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177227 (0x2b44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 12 14:23:14 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:1b:57:c7:fa:2a:b8:ad:4d:c4:72:41:a7:
b2:29:f8:5e:cc:d6:98:c1:75:eb:00:90:39:2f:f1:
fe:c6:a5:23:88:ba:2b:a4:47:3a:37:d1:29:49:eb:
ce:c9:5f:b1:f5:9f:97:68:f7:2a:e0:28:5c:eb:ff:
69:6a:b7:4d:7a:35:b8:06:40:f0:0e:c1:47:a1:63:
1e:bf:c3:fb:34:30:04:c2:9b:ef:6d:34:6f:9b:36:
35:0e:dc:9f:13:98:05:17:da:b8:72:15:ee:1f:b5:
38:a5:ca:88:5d:1c:d8:47:e7:af:c1:bb:c8:7a:d8:
f3:7e:b6:5d:15:b6:fb:42:bc:b7:94:69:02:c0:b8:
c7:b0:d5:b3:78:ae:e6:02:5d:7d:82:1a:02:9b:b5:
9d:0d:5c:c8:d0:58:db:6a:31:49:b4:51:90:e7:b8:
ea:3f:7f:79:20:dd:59:14:87:2c:ca:50:44:76:2f:
55:74:fe:75:8c:cb:d6:fb:2d:cf:3e:8b:fd:99:1f:
39:7b:57:73:2e:38:5a:e7:59:96:d1:4d:76:27:53:
29:e4:a8:78:2a:e0:3c:79:84:be:3b:92:48:18:9d:
6e:49:89:b8:d8:cb:da:95:11:9b:0e:ba:cd:a0:af:
90:7a:70:cf:49:9d:9f:f7:b0:1d:de:c5:0d:40:2f:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136987
sbgp-ipAddrBlock: critical
IPv4:
121.200.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ef:9f:74:06:ad:88:05:3c:54:44:cd:1d:41:a2:cc:c2:5f:
3f:36:b9:86:45:be:eb:4c:b5:05:d0:f8:50:52:c6:6a:a5:60:
b0:ae:af:b1:fb:8e:f3:69:62:24:6a:4d:9b:1c:c9:55:1e:f2:
e7:e0:00:13:63:54:2b:09:41:00:3f:15:85:a9:6b:ea:d7:44:
62:2b:78:e2:67:b0:a7:4d:1d:af:fc:ad:20:76:99:c5:85:c0:
74:45:e6:c3:67:85:7e:96:06:49:8d:7d:91:37:d3:8d:74:83:
8c:b7:0c:ff:5c:b3:0b:a9:26:de:18:e1:6c:a6:5a:82:e3:1b:
e4:2d:eb:a7:d7:4a:75:8c:d7:d4:bb:6f:47:ac:13:47:fd:50:
ec:73:67:57:b8:76:4f:e9:81:39:ba:0e:6c:db:61:eb:90:71:
11:9f:89:7c:62:be:32:2c:0f:00:ca:76:47:d7:5c:91:f7:cd:
5a:1b:97:e2:ac:1c:5b:de:8f:65:bb:8a:b9:83:4c:6a:5f:cc:
22:a0:e0:07:ce:c4:90:5e:f4:a5:7f:26:16:f1:55:7e:be:aa:
e4:e8:86:d4:f3:b8:fe:97:84:77:a7:a2:ff:0e:57:50:d3:a5:
5d:f5:cf:67:7f:a1:72:f8:e1:ef:3a:5d:fa:bf:d7:2f:5b:a8:
05:22:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:33 2026 by rpki-client