Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
File: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer (raw, json)
Hash identifier: Llx/TZ2fUAmve0l7Ftkkd08K/7gkceM1gz4EPdw+zlM=
Subject key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5109
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:42 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.124.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20745 (0x5109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:bb:31:5b:b3:ef:fe:a3:4e:00:10:af:07:
97:a6:3b:b8:a2:ae:e0:46:36:a2:2f:ed:a9:e7:c8:
8e:9b:f5:8f:d1:2a:3f:9a:cc:75:2b:2c:f5:a1:9e:
d4:23:81:ef:fd:e1:85:6a:61:21:72:b0:8a:cc:f9:
11:1c:d7:6d:e2:32:58:a1:00:b7:b6:58:79:97:27:
56:31:a2:4f:78:b6:1c:7a:90:93:aa:08:d1:6e:cb:
0a:6e:30:d6:30:13:43:6c:66:47:48:73:e5:17:3f:
30:bd:6f:1b:1c:51:ec:ce:cd:03:e5:eb:7c:8e:95:
87:8c:7f:65:61:a1:23:8d:86:2d:fc:b5:2a:f7:93:
5e:c1:94:3a:35:5b:49:a6:22:ae:9a:a9:36:64:10:
a5:f6:9b:c6:96:2b:b5:90:dc:45:4c:11:f1:a2:c3:
21:99:04:28:0c:d9:f9:9f:5c:cb:36:28:0a:4a:c3:
ad:dc:1c:31:33:f8:94:aa:c0:fc:de:7c:09:ab:0e:
97:0a:eb:5b:94:71:67:1e:3b:59:6d:8b:93:eb:45:
5a:3d:1b:9a:30:e9:f0:e0:e3:0e:0f:d8:a5:5a:c7:
53:e8:f0:13:fd:13:1c:9a:24:c6:ca:e7:f7:74:76:
02:d2:96:97:b3:68:c0:53:b4:c8:78:d6:c4:13:ec:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.124.0/23
Signature Algorithm: sha256WithRSAEncryption
96:b3:4c:e6:2d:e8:3d:ee:98:32:df:8b:9b:04:b1:06:11:c7:
e7:ae:e9:20:66:b5:7d:24:a1:29:eb:de:f6:12:b7:07:5c:46:
de:2f:e7:0e:2c:b6:b6:eb:1e:36:a2:42:c3:74:cc:03:ec:ad:
22:fc:76:84:7d:ed:04:83:b8:fa:f4:f4:c9:5c:a1:7f:5e:f2:
3d:21:b5:cf:22:bb:9d:a9:61:2d:3b:e1:93:55:ba:5c:a5:f5:
7e:97:67:8a:0f:72:b7:f3:a5:5a:3a:fd:22:b0:ff:1c:2e:2e:
7a:7e:76:b0:a0:a3:be:9f:ae:1a:c9:91:0f:70:56:a4:30:44:
df:71:8c:20:0f:29:0b:10:7c:01:80:b9:9b:35:36:7b:35:ca:
86:7c:45:2f:7a:0a:cd:42:97:6a:d1:3d:c0:61:64:31:52:e4:
85:d8:c6:aa:4c:af:b4:84:a2:04:dd:ea:19:10:11:c4:f2:77:
9c:ed:57:f1:e3:34:c8:e3:88:f7:28:ef:37:d6:8a:c6:34:4c:
6b:31:cb:d6:e8:fe:25:33:a1:e2:22:87:1f:a8:a7:24:55:51:
b0:ab:14:97:5f:85:71:dc:de:27:8c:4b:71:d6:c3:fb:86:54:
41:38:ef:d1:17:35:05:5a:9a:4d:9f:9f:d4:4d:84:43:dd:be:
87:ea:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:11 2026 by rpki-client