Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
File: UYdFx6LySigtdUZZUC_WYh3HYYQ.cer (raw, json)
Hash identifier: 6NuHaFyX0bOAs0OnS/9bKyBvEZ3wgZFX+XF3UDNG5gQ=
Subject key identifier: 51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 09:27:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 130.130.0.0/16
IP: 192.35.248.0/24
IP: 192.70.135.0/24
IP: 192.131.251.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33238 (0x81d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 09:27:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A915FE2E, serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:88:ae:86:65:a7:cd:3b:7f:c2:04:90:79:
c3:59:b2:14:35:a4:5d:69:52:c4:ac:e2:32:ea:df:
97:d4:37:08:87:9f:ce:0b:bf:9f:56:77:bc:2f:8f:
70:e7:29:3d:bd:4c:19:7c:1a:f1:d1:c4:ec:d9:0d:
74:41:10:6e:1b:8c:3a:07:1b:a3:b5:cf:4a:fd:fb:
aa:00:3c:87:b8:22:92:0d:e7:23:bc:c6:d8:95:88:
65:d8:fa:70:f4:a7:f1:39:d8:9c:42:12:3d:9c:91:
ba:d5:97:5d:98:a0:df:c4:68:e7:cb:bf:40:24:54:
9f:6b:b1:59:d6:45:7c:bf:86:14:7b:db:70:6f:5c:
f9:dc:15:45:52:bf:d4:64:07:da:71:6f:63:9e:28:
62:6d:27:58:bc:fc:14:1b:1a:6d:83:98:6e:3e:fe:
46:12:ea:91:4f:86:cf:26:f0:2b:3d:83:a5:10:df:
9a:5c:ef:26:bd:25:62:e2:2a:e7:3e:6d:37:be:3b:
c4:3e:36:11:05:51:93:27:01:e3:90:ad:8c:f3:39:
e4:b5:bc:d9:cc:b7:8c:25:a7:4d:80:24:79:14:77:
7a:a4:44:e8:56:29:37:d3:e0:98:c1:c5:09:ca:4a:
ec:55:b8:6e:3a:ff:ed:89:39:8b:de:7e:b4:ad:58:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.130.0.0/16
192.35.248.0/24
192.70.135.0/24
192.131.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a3:22:59:a4:88:41:bd:e6:fd:8a:05:24:f2:45:9e:0a:07:
fd:ed:31:bb:50:a1:ed:2a:3f:7c:bb:f9:63:5a:fb:2c:49:82:
75:ba:54:cc:86:81:f2:07:58:ab:ff:6a:cd:86:22:d5:c2:12:
9e:f6:bf:f7:5b:90:be:fd:54:97:26:5b:66:d2:13:50:aa:90:
e2:cd:07:77:44:b5:8c:6b:23:6a:a8:75:5e:d8:af:74:b7:46:
91:8f:96:74:7d:07:f1:7f:56:f1:1e:f3:83:a8:ad:bb:72:54:
35:d1:e0:77:a3:64:aa:bd:2e:eb:4e:42:a0:61:11:a1:d5:49:
0c:73:e8:39:84:b6:14:f0:53:6c:9d:a3:bc:e9:1b:37:b4:fb:
7c:8b:9e:4f:b5:fe:8d:7e:b3:d8:d4:80:b1:a2:83:5d:2e:a0:
de:a3:a3:25:f4:cf:d7:99:6a:d3:fc:f7:b2:0d:7f:43:23:ec:
53:f1:7c:0a:f7:ba:3c:0e:9e:29:8e:90:ac:6b:58:53:72:b2:
54:7e:57:6e:fd:aa:36:3e:91:47:4a:32:d0:69:13:09:40:9f:
3d:75:6f:b2:bc:9f:64:90:72:33:48:8c:f2:f9:39:3b:08:f5:
55:fd:a1:85:ce:79:eb:e4:94:1f:f7:ee:3e:e6:36:95:67:49:
29:a8:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:49 2026 by rpki-client