Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.cer (raw, json)
Hash identifier: us5URDusGFdcnqiN0EKn9hMvT4neZwk4HltFZN8PnKU=
Subject key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C8E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 07 Jun 2026 14:14:28 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 160.20.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31886 (0x7c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 7 14:14:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:f3:bf:36:e4:b9:a8:b6:22:cf:69:41:69:
a5:22:8d:94:60:48:09:8a:54:0b:71:a4:f7:8a:37:
24:05:9a:c1:8d:87:c7:8d:2d:b6:4b:2a:5e:20:02:
77:72:56:89:43:7a:a1:8f:7f:e8:8c:2a:1b:da:ae:
3a:28:95:d5:41:81:c1:ae:10:b0:1f:a8:b1:32:e1:
02:aa:32:c8:b6:aa:63:04:a3:fd:e6:4d:8b:26:9c:
6c:60:f2:f9:49:9b:7a:78:92:21:ea:dd:18:c6:09:
13:76:ad:5e:50:60:f3:44:71:f7:f1:df:c4:0f:ab:
69:77:4c:26:19:1e:61:83:04:dc:c1:59:2e:d0:7c:
86:d2:02:79:ad:6b:0d:a6:1b:8a:48:b1:2d:3e:25:
92:f8:04:3b:90:ff:d2:dc:9d:98:0b:50:af:86:99:
82:8e:30:b1:dc:d1:1b:16:4d:3d:c2:f3:32:12:21:
b5:f6:49:1f:7b:2c:b6:12:2c:55:c1:2e:af:d8:b9:
c8:bd:e8:40:5e:e0:35:de:70:d5:bd:95:46:59:8c:
4c:eb:be:77:17:45:c7:90:f3:a9:82:dd:d8:89:18:
f9:cb:1a:c4:07:69:d3:c6:34:d5:ac:39:b5:27:84:
80:cf:5b:4b:f6:b1:6d:c1:4e:94:ad:0c:cf:18:d4:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:a5:0f:96:0c:cc:3f:8f:ec:3f:38:77:32:10:57:8f:a4:00:
b6:21:7f:ed:8d:36:f3:2c:f6:37:13:29:c6:1d:1a:68:6a:74:
88:c4:d8:d0:52:8f:1f:eb:83:35:63:43:9a:04:bd:29:ba:df:
13:33:26:a9:7e:5e:a1:6a:fa:d2:c6:93:71:bd:2a:c9:a9:75:
20:50:5c:10:19:ce:09:72:47:88:54:94:61:90:a3:20:05:3c:
5f:e1:1e:59:89:06:0f:60:23:5c:95:31:51:33:37:a1:36:a3:
23:3e:0c:92:d9:7e:d3:aa:b6:96:44:47:7d:d8:c1:28:14:b4:
85:e7:77:4e:4f:12:f3:ed:91:41:3a:32:2e:1f:6f:77:99:12:
90:6a:86:58:e3:02:38:e4:07:f4:98:fc:8c:c2:8e:a8:0e:3f:
ed:2b:e4:a8:35:a9:8a:91:cd:88:af:13:24:07:7a:e4:00:9d:
cc:56:42:8d:3f:9a:5d:9e:f3:f6:99:34:92:c2:eb:85:e9:f9:
72:f5:11:fc:50:f9:37:da:33:89:03:29:76:ae:eb:11:46:5b:
dd:fc:91:36:57:91:4f:e3:5e:5c:3a:a6:7c:e3:f6:9e:fe:d3:
a2:0a:79:07:6d:0d:88:32:51:a8:d2:50:4f:fb:2d:42:40:a4:
7d:b7:ec:3f
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjA3MTQxNDI4WhcNMjcwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDRjA2NDExMC8GA1UEBRMoQUQ0MzMyMDM4MjcyQzJEQjMyMTVEREEz
QURGQjAxNTM1NDE1NjkxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOCo87825LmotiLPaUFppSKNlGBICYpUC3Gk94o3JAWawY2Hx40ttksqXiACd3JW
iUN6oY9/6IwqG9quOiiV1UGBwa4QsB+osTLhAqoyyLaqYwSj/eZNiyacbGDy+Umb
eniSIerdGMYJE3atXlBg80Rx9/HfxA+raXdMJhkeYYME3MFZLtB8htICea1rDaYb
ikixLT4lkvgEO5D/0tydmAtQr4aZgo4wsdzRGxZNPcLzMhIhtfZJH3ssthIsVcEu
r9i5yL3oQF7gNd5w1b2VRlmMTOu+dxdFx5DzqYLd2IkY+csaxAdp08Y01aw5tSeE
gM9bS/axbcFOlK0MzxjUy80CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBStQzIDgnLC
2zIV3aOt+wFTVBVpEzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0YwNjQvRjNDQTYxNzI0NEUyMTFFRkIxM0YyMjE0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNGMDY0L0YzQ0E2MTcyNDRFMjExRUZCMTNGMjIxNEM0RjlBRTAyL3JVTXlBNEp5
d3RzeUZkMmpyZnNCVTFRVmFSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAUfjANBgkqhkiG9w0BAQsFAAOCAQEAD6UPlgzMP4/sPzh3MhBX
j6QAtiF/7Y028yz2NxMpxh0aaGp0iMTY0FKPH+uDNWNDmgS9KbrfEzMmqX5eoWr6
0saTcb0qyal1IFBcEBnOCXJHiFSUYZCjIAU8X+EeWYkGD2AjXJUxUTM3oTajIz4M
ktl+06q2lkRHfdjBKBS0hed3Tk8S8+2RQToyLh9vd5kSkGqGWOMCOOQH9Jj8jMKO
qA4/7SvkqDWpipHNiK8TJAd65ACdzFZCjT+aXZ7z9pk0ksLrhen5cvUR/FD5N9oz
iQMpdq7rEUZb3fyRNleRT+NeXDqmfOP2nv7Togp5B20NiDJRqNJQT/stQkCkfbfs
Pw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:16 2026 by rpki-client