Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer (raw, json)
Hash identifier: d6iQWEtlIfT/CDkjSlyk7R5qqXoZyX4bm6Ry/0KoL/g=
Subject key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6636
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 07 Jun 2025 19:20:12 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26166 (0x6636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 7 19:20:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:18:9a:d3:0b:f5:59:32:04:fc:a3:36:81:
52:0e:5d:ab:7b:bf:ad:8a:b4:9d:a7:ad:d7:df:d4:
ea:1a:3f:6e:2f:9d:75:d7:fc:94:72:d7:1a:32:ce:
ff:8d:83:d0:ab:07:a4:43:b9:fe:b1:d3:65:da:96:
30:18:24:f1:11:a6:43:cc:c1:96:79:b9:59:11:95:
23:9d:e6:a2:99:93:1c:10:7f:77:2c:4b:5f:e1:aa:
ee:40:f7:91:a5:10:94:63:bb:79:7c:b4:48:99:76:
e3:86:6f:02:a9:fb:1b:37:ca:f7:7e:1f:61:12:cb:
8f:7a:0e:7d:48:5b:08:c1:f8:5e:63:10:fc:dc:e6:
c4:64:85:4c:c4:47:e9:ae:36:74:8a:77:76:f8:52:
58:37:5b:a5:64:4a:2e:ca:87:16:26:3a:ce:63:13:
5b:c2:b2:8f:80:78:16:2a:32:b6:e6:22:b4:1f:c4:
72:5d:83:3d:ec:77:3f:18:c2:bb:59:0d:94:49:9d:
2b:fa:35:91:a1:6f:25:40:71:33:c3:31:e3:bc:bc:
74:6f:65:39:51:60:44:c9:2e:1b:fb:23:6b:39:b3:
e7:bb:d2:e3:f9:9e:15:d0:1f:53:a1:ad:f0:8c:a4:
36:a9:8a:8d:1a:28:24:8c:b3:e2:a6:94:c1:10:fc:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.218.0/23
Signature Algorithm: sha256WithRSAEncryption
17:46:15:76:9e:03:32:86:3f:cd:90:63:28:f5:52:cb:2d:88:
3e:a3:c5:a6:80:bc:2d:31:bc:23:8a:d5:0a:fb:1f:47:cc:23:
73:b8:9b:ed:28:3b:85:82:95:80:d4:78:93:0d:e7:1b:31:6a:
b3:3f:f3:15:24:ff:06:21:38:31:48:d2:b4:98:30:37:22:84:
d7:4a:6a:bb:c8:9f:33:fc:8b:87:e4:c6:93:d1:e6:32:75:70:
0d:ef:ac:b7:cd:39:ad:72:9e:f1:54:93:c7:a8:24:17:6e:09:
1c:61:81:cc:38:dc:7c:a3:d6:2a:90:fd:fa:09:e4:ac:23:c6:
62:4f:39:22:03:08:5d:ee:3c:5e:e5:89:1c:92:77:83:af:6e:
bd:03:7e:21:fe:d2:22:82:0e:7f:07:d7:ce:1b:f0:e3:97:ed:
60:11:5a:b6:3b:c3:b0:ac:95:ff:5a:6b:9e:a7:12:b7:cb:31:
f7:3b:f7:cc:1b:9d:b6:f2:83:6b:0e:17:fe:81:51:aa:a8:07:
68:69:4b:37:d6:2c:2c:94:d3:79:d4:18:76:98:7f:6c:2e:56:
db:b4:51:5b:8e:5d:7d:66:6f:2c:78:f3:4e:91:a1:0f:fd:e6:
fa:bc:a2:d6:1c:57:ef:28:cc:1c:61:0d:d0:e0:aa:a3:d8:4b:
9d:fe:d1:24
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjA3MTkyMDEyWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FC
NjNEODRCRTQyOTE5NTRCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKm7GJrTC/VZMgT8ozaBUg5dq3u/rYq0naet19/U6ho/bi+dddf8lHLXGjLO/42D
0KsHpEO5/rHTZdqWMBgk8RGmQ8zBlnm5WRGVI53mopmTHBB/dyxLX+Gq7kD3kaUQ
lGO7eXy0SJl244ZvAqn7GzfK934fYRLLj3oOfUhbCMH4XmMQ/NzmxGSFTMRH6a42
dIp3dvhSWDdbpWRKLsqHFiY6zmMTW8Kyj4B4FioytuYitB/Ecl2DPex3PxjCu1kN
lEmdK/o1kaFvJUBxM8Mx47y8dG9lOVFgRMkuG/sjazmz57vS4/meFdAfU6Gt8Iyk
NqmKjRooJIyz4qaUwRD8mykCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRQqvxqPvdb
IrdoPKtj2EvkKRlUtDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURFNkMvNkJDMzc1QjA0M0Q0MTFGMDkwQjQ3NjY4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVERTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajcz
V3lLM2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVj2jANBgkqhkiG9w0BAQsFAAOCAQEAF0YVdp4DMoY/zZBjKPVS
yy2IPqPFpoC8LTG8I4rVCvsfR8wjc7ib7Sg7hYKVgNR4kw3nGzFqsz/zFST/BiE4
MUjStJgwNyKE10pqu8ifM/yLh+TGk9HmMnVwDe+st805rXKe8VSTx6gkF24JHGGB
zDjcfKPWKpD9+gnkrCPGYk85IgMIXe48XuWJHJJ3g69uvQN+If7SIoIOfwfXzhvw
45ftYBFatjvDsKyV/1prnqcSt8sx9zv3zBudtvKDaw4X/oFRqqgHaGlLN9YsLJTT
edQYdph/bC5W27RRW45dfWZvLHjzTpGhD/3m+ryi1hxX7yjMHGEN0OCqo9hLnf7R
JA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:43 2025 by rpki-client