Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
File: rUR6Z_B-gc0JwyLs0QrZQWvESys.cer (raw, json)
Hash identifier: 4DaNSnmNhYHnj1ihoycUPlWU4fzl+Ww6/8vAAmjaReA=
Subject key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5197
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:31 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 193.149.153.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20887 (0x5197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:76:a9:af:c2:24:c2:28:ae:3a:27:20:6d:
70:a2:01:79:33:b4:66:20:51:07:56:02:bd:e5:6c:
12:7a:0b:98:ef:2e:a3:13:da:1e:15:3e:2f:d4:c9:
a7:7d:93:6c:21:84:03:8f:91:af:3d:4b:10:2d:d6:
27:f0:8e:d1:a6:13:d8:d2:4b:f1:42:1d:b7:c2:49:
c4:a7:2b:ff:85:03:58:41:69:03:d5:51:74:7f:f1:
1a:91:0f:84:db:8a:12:c8:cb:32:8e:cf:60:c8:4f:
cc:5e:6c:e1:55:bc:0f:50:d2:52:12:31:a7:fc:b0:
1b:c5:d4:c0:3f:32:f2:c0:18:be:7d:cd:78:e9:3e:
2f:92:c7:84:d5:9e:da:41:e6:6f:fa:b2:cb:88:f9:
7a:03:57:a1:fe:30:94:44:39:2c:16:ae:8c:4e:1e:
7d:9d:f4:e9:1f:51:27:d8:ef:09:e8:60:31:ad:b6:
6b:d3:a2:2b:7b:3d:3b:0d:85:06:b3:45:44:db:fc:
c8:22:3e:09:76:18:ba:04:8c:f6:44:90:0a:7a:89:
a0:cb:35:69:29:ac:0a:96:8e:b4:10:57:e6:29:83:
d4:94:75:af:7d:e9:5f:9c:f0:df:cb:6f:7a:d7:91:
19:88:ba:29:d3:4a:18:07:9a:f9:5b:d8:21:f7:a6:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
47:21:80:50:77:13:09:e4:13:9d:b8:7f:15:38:fe:9b:9e:7f:
d1:63:ea:d3:cd:8e:e4:cb:04:ef:2d:33:68:91:e3:ce:2c:30:
2c:42:40:e1:2f:e8:c4:92:fe:b5:16:da:d4:e8:f9:34:17:21:
37:39:82:ab:44:c4:a4:4b:18:b2:f6:ee:d0:ae:42:6c:43:db:
fe:d0:09:74:5c:ef:68:5c:39:38:2b:14:4b:f4:bf:a5:b5:59:
67:70:23:bf:c1:43:5f:be:de:a0:26:8a:3c:f4:e0:fa:8c:f5:
a8:82:7e:64:9c:c1:49:7e:7d:ba:75:82:69:da:57:ef:04:1f:
ba:7b:e1:9d:24:74:d1:e7:51:59:94:f8:13:03:e5:d6:c4:7e:
8e:72:1e:20:59:f8:39:67:7f:38:9b:ac:17:8d:1e:d5:08:98:
4f:15:3d:3b:09:26:b7:4a:04:eb:b7:fe:66:c7:8d:89:94:3a:
75:7d:aa:0f:5c:fc:73:af:dd:b4:58:a8:ad:fa:80:0f:b2:33:
87:52:50:b3:de:e3:ad:8a:8a:10:fd:21:1c:57:bb:3b:e3:a7:
3d:bc:a9:0d:a0:08:8b:4a:47:18:e0:66:c2:92:98:fd:6c:e0:
c8:79:68:3b:b2:42:30:25:97:eb:2e:fe:ac:c5:aa:9a:fc:14:
9a:65:55:70
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMjI3MDMwNTMxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4OEVCNjExMC8GA1UEBRMoQUQ0NDdBNjdGMDdFODFDRDA5QzMyMkVD
RDEwQUQ5NDE2QkM0NEIyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANbedqmvwiTCKK46JyBtcKIBeTO0ZiBRB1YCveVsEnoLmO8uoxPaHhU+L9TJp32T
bCGEA4+Rrz1LEC3WJ/CO0aYT2NJL8UIdt8JJxKcr/4UDWEFpA9VRdH/xGpEPhNuK
EsjLMo7PYMhPzF5s4VW8D1DSUhIxp/ywG8XUwD8y8sAYvn3NeOk+L5LHhNWe2kHm
b/qyy4j5egNXof4wlEQ5LBaujE4efZ306R9RJ9jvCehgMa22a9OiK3s9Ow2FBrNF
RNv8yCI+CXYYugSM9kSQCnqJoMs1aSmsCpaOtBBX5imD1JR1r33pX5zw38tveteR
GYi6KdNKGAea+VvYIfemG40CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBStRHpn8H6B
zQnDIuzRCtlBa8RLKzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhFQjYvOUMwRUY4M0E3NEVDMTFFQzkzRjgxQTMzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4RUI2LzlDMEVGODNBNzRFQzExRUM5M0Y4MUEzM0M0RjlBRTAyL3JVUjZaX0It
Z2MwSnd5THMwUXJaUVd2RVN5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMGVmTANBgkqhkiG9w0BAQsFAAOCAQEARyGAUHcTCeQTnbh/FTj+
m55/0WPq082O5MsE7y0zaJHjziwwLEJA4S/oxJL+tRba1Oj5NBchNzmCq0TEpEsY
svbu0K5CbEPb/tAJdFzvaFw5OCsUS/S/pbVZZ3Ajv8FDX77eoCaKPPTg+oz1qIJ+
ZJzBSX59unWCadpX7wQfunvhnSR00edRWZT4EwPl1sR+jnIeIFn4OWd/OJusF40e
1QiYTxU9Owkmt0oE67f+ZseNiZQ6dX2qD1z8c6/dtFiorfqAD7Izh1JQs97jrYqK
EP0hHFe7O+OnPbypDaAIi0pHGOBmwpKY/WzgyHloO7JCMCWX6y7+rMWqmvwUmmVV
cA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:20 2026 by rpki-client