Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer (raw, json)
Hash identifier: 9wlaQQALy95UzzUdfYnOIIOzlNcs7x14gor7u1Kv3Qw=
Subject key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 828B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 13:38:34 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33419 (0x828b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 13:38:34 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:6c:64:8e:46:83:10:29:e6:9e:d8:2d:ce:
a6:80:a5:55:25:16:e6:f3:2e:dd:1b:e6:57:3e:cb:
34:d5:7a:80:56:e1:62:45:4e:f2:76:77:5b:19:86:
ef:b6:41:3f:b5:c3:15:05:5f:90:08:47:a7:a6:60:
9d:95:e2:cd:ee:79:42:be:5f:40:49:b2:23:e5:f9:
5b:b5:a2:03:5c:7b:fb:36:d4:0d:04:69:d1:d9:1d:
ea:ea:f7:88:a6:11:b4:b6:71:35:21:b6:c8:80:df:
57:86:97:0b:4c:e4:e4:7e:da:54:d6:1d:e6:b6:d2:
60:b8:9c:6a:dd:d5:8b:ed:d8:70:91:47:73:7a:fb:
d9:c7:24:98:8d:5f:db:32:86:b3:c3:55:80:c0:3c:
96:8b:0b:6e:0f:02:13:ee:4a:03:0b:d2:0e:32:76:
88:42:48:4e:43:bc:38:e6:4f:0f:ef:07:c5:c6:56:
3a:6e:6f:a6:ed:e6:d5:fa:b9:11:3c:f8:9f:a3:94:
a2:8d:e0:de:bd:f8:13:39:e7:c9:18:a3:eb:6d:5e:
11:ee:9f:2c:77:bd:db:16:82:4e:dd:48:2f:ff:d3:
25:89:25:4a:1f:7d:b3:5b:c2:6d:b4:2b:50:b3:6d:
6b:a6:d8:73:12:87:11:29:fe:ae:ca:a4:76:b2:ab:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.100.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:41:3d:fa:b9:08:e8:78:87:ab:82:9b:22:8f:9d:74:e0:e6:
9c:e6:84:d1:b7:a3:80:f9:17:7b:7f:9d:ad:2b:93:0d:54:7a:
9e:c5:9e:25:44:c2:85:d8:bd:41:e9:94:b6:ec:70:77:67:63:
2f:05:35:7c:1b:48:e6:00:bd:c9:f9:c0:a3:f3:0f:ed:b9:bb:
c2:87:95:ab:b5:c8:f2:3b:d3:da:9a:2b:e5:44:11:64:6a:89:
51:c4:4c:11:d1:90:18:cd:b6:52:f1:67:35:e8:47:44:41:85:
dd:1f:f4:f1:75:a5:1f:59:7b:e8:03:fd:a7:ea:48:0d:fe:a1:
78:9b:93:42:a8:7f:de:23:0d:70:66:31:8e:f8:60:9e:47:ab:
8c:a2:68:81:fc:05:a0:ab:ed:4e:60:f1:c4:2d:57:92:d1:62:
6d:65:06:65:ac:b5:49:a7:a7:29:05:eb:7b:6a:e7:98:26:cd:
b3:f3:a1:94:7f:69:12:6a:9d:d1:36:61:5b:43:98:3d:5b:84:
68:c8:81:ad:7d:75:a6:a3:de:15:8a:06:ce:33:3b:15:0b:73:
3c:b6:bb:92:f0:e0:7c:1f:cc:9e:1f:24:6b:99:5b:69:1e:49:
09:f0:39:5c:73:b4:21:74:e7:1d:a2:31:ea:52:75:79:7b:46:
fb:d3:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:42:59 2026 by rpki-client