Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
File: UgupTND7nnwUDfvAzFi5PPVMIvM.cer (raw, json)
Hash identifier: XyWWw/4EFMVfesLXkO7E2/RZ38saecfsvjW/wYSYN7c=
Subject key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 05 Sep 2026 04:31:02 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33263 (0x81ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 5 04:31:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:2a:18:c3:c6:8a:4f:25:fd:39:e3:9e:24:
d8:cb:fd:41:05:32:ea:bf:ad:16:7e:c6:00:0d:dd:
b9:36:80:49:67:9f:1d:d8:39:82:16:cb:6f:f8:1d:
3b:e3:45:3a:06:87:99:4a:96:33:f4:29:13:fe:79:
0b:ff:c3:17:e6:91:96:64:e2:e9:78:9d:7c:64:f2:
56:8c:c7:9b:57:cb:8a:e5:cb:b1:cd:76:50:4c:9c:
5d:f5:ea:b9:06:95:d4:c1:ec:66:30:2c:5e:a5:05:
98:64:2f:66:33:6b:a5:91:de:35:71:15:7c:01:a7:
61:e0:56:53:ce:0c:bc:df:43:d3:b1:1e:66:49:8b:
09:d3:92:01:9d:c1:f3:cd:5f:6b:38:2a:e9:c1:da:
6c:af:a1:f8:8a:68:97:bc:c1:f1:cb:b2:d9:ab:83:
36:bf:88:f5:fc:b5:60:ab:64:06:5e:85:89:c2:89:
51:5a:a7:a1:9e:30:d2:66:cd:ec:c6:7e:aa:d0:09:
52:e6:98:ce:7d:ed:d8:72:6f:e2:c6:0a:e3:a9:ad:
d1:cb:8b:5a:a5:b2:c5:38:b3:34:f1:0a:92:59:86:
45:55:8e:c1:28:a7:00:30:7e:8e:d0:f5:fe:b2:27:
3a:f4:a4:0f:f2:75:5d:d3:d6:75:d4:1d:9a:bd:2b:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.26.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:62:24:89:e7:20:61:b3:4f:5d:e0:d2:73:18:6e:01:55:69:
ad:45:15:de:f6:b6:5d:e8:42:7a:29:42:9a:ff:e2:5f:eb:5f:
4b:e8:69:58:02:db:ee:98:86:20:c7:f1:8d:8d:ab:a7:8d:23:
c8:91:3c:f7:21:60:46:be:c3:80:fa:b3:1c:0a:de:6b:e5:52:
aa:76:c9:ce:49:18:2f:80:78:a8:47:bb:21:21:1f:b4:66:87:
fc:6a:68:40:59:86:4a:20:35:be:fa:ff:46:9f:9d:e4:f2:7e:
5b:a3:e2:0f:84:76:70:18:b0:3b:0a:d4:88:36:65:68:7d:9d:
80:45:6f:39:13:90:b9:b3:e2:ca:86:ab:d3:00:fe:71:8d:8f:
84:7f:94:fc:e6:7f:65:ac:8e:b3:70:57:6a:40:1a:8d:fc:23:
5b:f5:cb:c3:d4:4e:ff:14:66:00:1a:05:4d:dc:94:60:24:05:
20:14:6f:e8:7e:6a:f3:4f:3f:36:a9:65:81:8b:6b:a2:99:b0:
00:7a:cf:da:b6:1a:d8:6a:8c:bd:a9:80:5d:2c:8d:78:a5:eb:
46:97:14:fb:43:ff:20:da:21:b4:42:3b:cb:ed:5e:4d:ef:77:
13:02:3d:a3:4f:d7:f2:11:84:88:5d:12:e2:36:6f:ed:a8:f6:
36:21:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:18:51 2026 by rpki-client