Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.cer (raw, json)
Hash identifier: aSzujh7q0BOY7LdlJg1lTSymydPT1Yy/O6HA4CGXLOw=
Subject key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7976
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 14:26:37 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.104.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31094 (0x7976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 2 14:26:37 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:cd:b5:36:62:a3:5f:75:fc:c8:a7:93:e4:
1f:03:af:02:41:fa:dc:9f:db:bd:8d:dc:71:ca:8b:
a9:4f:91:d9:89:45:34:c1:d9:6f:27:ff:1b:f3:7c:
80:45:77:2f:0d:d1:2f:8f:bb:c7:7a:5c:50:7c:83:
00:23:c5:da:56:8c:00:c7:00:72:ad:98:16:7d:49:
cc:49:26:a6:34:62:5a:1a:ba:f8:0c:d8:cc:ce:b2:
ef:8a:12:9d:26:49:aa:2f:49:c2:3f:ba:69:ec:c8:
a9:ab:32:15:f3:0f:7a:30:0a:87:bd:4d:47:14:18:
18:24:da:f8:82:c1:9c:50:5e:2a:cd:8c:1c:a2:cd:
b7:46:ea:ba:5d:9b:fd:20:27:99:c2:90:81:db:9e:
ef:91:8f:32:f0:71:fe:40:0e:6d:ab:a8:53:47:4a:
a2:ba:c5:db:e4:19:cd:a4:7d:91:b7:37:49:42:1d:
c3:02:ce:8d:7a:fd:fc:74:d0:a2:42:fe:fb:d9:0c:
ec:ff:42:fb:da:7a:b1:4e:90:01:97:63:84:57:bc:
8b:71:b6:b1:06:b1:46:03:d6:ce:75:71:02:f8:b8:
96:aa:bb:d2:eb:09:61:c8:18:a9:39:34:19:44:57:
ec:2c:6d:f4:d8:b1:ab:4d:58:df:5c:81:5f:09:fb:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:3c:dc:09:c3:4a:d5:1c:c3:9c:51:ae:dd:7c:68:7e:83:46:
ab:6f:87:cb:15:39:91:b1:f9:2c:19:f6:54:24:47:cf:dd:0d:
1f:8f:e1:50:3a:20:d7:61:26:b3:63:25:f7:a6:84:67:03:10:
2f:d5:a9:18:00:67:1f:48:69:21:92:b6:32:04:18:e8:bc:79:
22:29:8e:a2:be:c8:92:2a:0a:4c:92:47:ef:a3:b8:b0:cb:f4:
f1:4a:32:9a:bc:c6:db:09:49:83:50:be:54:7b:dd:1b:26:c8:
66:dc:df:73:aa:d6:7e:c0:c2:78:eb:14:02:22:35:49:ca:d5:
e8:bf:aa:ae:b7:ff:c3:40:ae:be:45:90:f2:5f:a1:66:35:0a:
e2:63:2d:79:d4:80:12:65:d8:20:2e:a8:73:30:23:56:24:16:
93:55:7b:c2:06:3d:01:31:e0:12:d7:82:ef:ed:dc:8b:02:ab:
9c:f3:f0:8f:0a:4b:0c:62:04:ce:ff:ed:0c:5a:b7:ea:e9:d7:
76:c4:cc:f2:0b:c8:b0:df:b5:4a:a9:7e:fe:5c:17:e5:6f:c2:
56:91:8d:ee:93:81:b7:d0:b6:04:48:0a:d8:5c:89:a7:e4:01:
d4:c7:aa:50:a6:4f:9a:1a:24:6b:d9:a5:98:cc:ad:96:c4:3c:
1e:98:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:16:07 2026 by rpki-client