Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.cer (raw, json)
Hash identifier: q7Y+sFq2btRtLgYtk7gHkuinA5ZxexnNF0WhWpnubBc=
Subject key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 13:36:18 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31828 (0x7c54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 13:36:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:8a:14:50:d1:e0:67:8b:56:98:5c:0b:ea:
58:3f:8d:07:b1:58:74:c9:2a:a4:88:df:70:72:15:
ff:5e:fd:87:fc:ac:c1:08:4a:0c:15:7f:08:4c:04:
fb:00:f7:3f:02:93:1b:da:4b:c1:18:6e:87:48:72:
89:8a:d2:0d:55:a8:d8:bf:78:a7:23:6b:4a:f6:3c:
5d:d1:a9:bb:89:68:a5:bd:b6:06:47:7a:3f:dd:d7:
4c:b3:53:bb:65:98:cb:12:d5:c5:94:98:7c:5b:28:
31:e8:34:b2:f3:b0:a5:0a:65:d9:b9:f3:5a:59:d0:
1f:8e:45:fe:6c:8b:fe:f2:08:2d:9f:23:67:ef:45:
f5:0a:cf:a7:87:36:f1:d4:d1:0c:3c:f2:f5:6e:b4:
18:63:a3:a2:a4:1f:c7:ab:29:d4:8e:0d:c6:43:d5:
3d:c9:1d:a0:27:c9:dc:79:39:06:0b:9d:98:fb:cf:
fe:2e:2d:81:aa:9b:ab:1b:3e:20:2e:5e:06:e8:40:
75:0f:56:94:78:d0:e0:98:bd:f2:94:21:6e:43:08:
52:4d:eb:3c:c4:92:92:ac:53:fb:b6:b2:91:92:1f:
da:d8:46:9c:be:d8:a7:02:c8:a8:5d:4d:39:80:77:
13:01:7c:00:f1:f7:d4:35:da:48:e3:78:b9:05:04:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.211.0/24
Signature Algorithm: sha256WithRSAEncryption
42:69:1a:c1:ff:a1:a1:cc:61:93:eb:5a:8b:c9:fc:32:c3:4d:
34:92:21:8a:07:d3:7d:dc:73:fb:26:a9:8d:81:44:02:36:93:
b0:ad:dc:2b:cf:19:74:04:fa:b3:73:89:83:28:c4:1d:a0:4a:
73:00:16:1d:6a:a1:84:ae:a6:e5:19:74:a7:53:ac:d3:ec:dc:
91:ec:5e:94:e2:a2:a9:1a:30:1b:f1:b9:95:a4:87:45:3d:71:
e6:2b:ea:40:86:b9:db:46:09:ab:0a:01:61:e1:49:28:e9:a0:
d7:c7:ea:68:73:07:28:7e:3e:30:d4:37:4e:a8:56:71:5c:5e:
21:67:1c:9d:f8:0f:7a:e4:ae:d1:28:64:c5:d1:3d:32:40:e4:
2f:3d:60:39:b0:2e:5a:52:6a:af:78:4e:46:70:1d:00:dc:ca:
1c:9b:29:b2:bd:ca:59:d5:65:6e:91:17:58:52:16:d5:a3:7e:
8c:1f:e9:4b:79:07:47:12:c7:ac:a9:96:26:5d:39:3f:fb:6e:
8b:6d:fd:8f:14:54:a6:b6:8d:de:2f:f1:7c:dc:64:82:c3:22:
65:b3:43:05:90:6b:65:34:9a:08:9c:7f:c9:44:5d:dc:78:93:
a2:a0:c4:ec:49:72:cc:9d:3f:10:4c:44:2b:89:32:4e:1c:67:
1d:ed:f1:7e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjAzMTMzNjE4WhcNMjcwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZB
NUUyMURENjAxNzhFQTM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANieihRQ0eBni1aYXAvqWD+NB7FYdMkqpIjfcHIV/179h/yswQhKDBV/CEwE+wD3
PwKTG9pLwRhuh0hyiYrSDVWo2L94pyNrSvY8XdGpu4lopb22Bkd6P93XTLNTu2WY
yxLVxZSYfFsoMeg0svOwpQpl2bnzWlnQH45F/myL/vIILZ8jZ+9F9QrPp4c28dTR
DDzy9W60GGOjoqQfx6sp1I4NxkPVPckdoCfJ3Hk5BgudmPvP/i4tgaqbqxs+IC5e
BuhAdQ9WlHjQ4Ji98pQhbkMIUk3rPMSSkqxT+7aykZIf2thGnL7YpwLIqF1NOYB3
EwF8APH31DXaSON4uQUEH/ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQhQpM/vm58
X7dnqGpeId1gF46jnTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhEMDAvRjFBRjEwNTI2MURGMTFGMEE2Rjc0RDdGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1
ZkYtM1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVl0zANBgkqhkiG9w0BAQsFAAOCAQEAQmkawf+hocxhk+tai8n8
MsNNNJIhigfTfdxz+yapjYFEAjaTsK3cK88ZdAT6s3OJgyjEHaBKcwAWHWqhhK6m
5Rl0p1Os0+zckexelOKiqRowG/G5laSHRT1x5ivqQIa520YJqwoBYeFJKOmg18fq
aHMHKH4+MNQ3TqhWcVxeIWccnfgPeuSu0ShkxdE9MkDkLz1gObAuWlJqr3hORnAd
ANzKHJspsr3KWdVlbpEXWFIW1aN+jB/pS3kHRxLHrKmWJl05P/tui239jxRUpraN
3i/xfNxkgsMiZbNDBZBrZTSaCJx/yURd3HiToqDE7ElyzJ0/EExEK4kyThxnHe3x
fg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:59 2026 by rpki-client