Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.cer (raw, json)
Hash identifier: 9Nrc2A7lnqPkxg89WypIi42KJoLLlEHRdJkez1NiG0I=
Subject key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 516D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:04:34 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 87.121.72.0/22
IP: 87.121.92.0/22
IP: 87.121.248.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20845 (0x516d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:04:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:9e:6b:ab:a8:58:78:f1:a8:19:16:8b:7a:
6e:ec:1b:a4:39:13:cf:c0:b7:96:55:19:e0:1a:45:
80:9d:db:4f:04:25:41:18:f0:92:ea:79:06:de:c3:
59:21:c0:39:b7:c1:f9:75:97:16:d7:ef:9a:08:4c:
9b:8c:ed:0b:9d:fe:6f:ff:a6:9b:b2:66:12:07:be:
58:a3:79:1c:29:92:a3:66:2a:c8:2d:2e:b9:61:4e:
ec:59:68:58:2a:3f:9a:2f:8c:a7:ec:2a:6f:4c:1f:
b4:b1:62:94:a6:73:8c:cf:00:e6:9c:ab:d3:26:8d:
86:54:43:37:ec:36:1c:18:fc:5a:be:b6:0c:03:dd:
56:2b:4b:87:11:cf:3d:e5:0a:6a:0d:0d:00:c9:90:
da:3d:f6:6e:3f:7d:01:b5:59:20:d9:6d:27:5d:42:
69:2b:86:0c:f4:9e:c6:e2:25:cf:d6:8e:43:c7:7d:
ac:c1:13:74:cc:1a:25:77:f3:19:62:b8:d7:b1:19:
23:3b:77:5c:25:ff:77:58:b1:18:ed:f4:97:75:a7:
15:76:74:75:6c:24:ed:15:f1:ce:9d:f7:f6:09:b7:
96:1a:8e:8b:a0:d6:57:49:e8:1c:9a:a4:4b:e9:e2:
1c:62:09:40:06:85:f7:04:b7:d6:07:92:37:ab:11:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.121.72.0/22
87.121.92.0/22
87.121.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a5:58:e3:03:5b:f1:04:ad:9e:fa:fa:df:30:73:a9:a0:a9:
99:7a:c8:1e:7d:26:06:3b:bf:9c:ed:d5:fd:29:86:72:ee:3f:
6b:cd:ec:1a:f4:af:1b:f6:04:a5:65:da:e9:56:a3:e7:96:b2:
8c:28:35:d3:89:7a:67:ce:0f:c8:82:33:e9:27:69:ba:b9:9f:
f6:d1:ea:a5:99:14:7f:f3:01:c6:fb:d7:16:b1:b2:12:a6:fa:
56:31:f2:12:82:cd:0a:43:04:4a:bb:ce:35:23:fb:57:57:be:
57:54:64:a3:c2:29:1d:b0:b3:13:1b:66:14:c7:55:8d:1d:4f:
a6:4d:aa:72:6f:2c:2c:32:30:52:3e:b9:52:c2:0f:2c:89:72:
d1:09:76:df:09:0c:e2:ed:31:50:91:88:c8:0c:11:6c:f0:a3:
a4:c1:6e:a6:a9:f7:45:d1:4f:02:7d:7c:92:44:ba:72:56:b7:
a9:d3:1b:72:3e:79:a2:63:ce:77:7c:e5:44:d8:dc:26:ee:0d:
d4:24:86:42:62:93:5a:28:12:42:2c:49:97:08:a9:4c:4e:08:
88:35:51:fb:e8:9a:87:84:25:bf:6c:07:8d:a8:91:2a:b8:d7:
5b:3b:19:aa:fa:65:8d:72:69:1a:25:5e:62:df:a5:75:d0:c5:
ef:54:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:43 2026 by rpki-client