Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer (raw, json)
Hash identifier: ylH1HRBwTMbix29sBc/RjzoNro8JhfmX3W5yyqt6WcI=
Subject key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C76
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jun 2026 04:53:18 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.8.0/23
IP: 168.152.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31862 (0x7c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 5 04:53:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:e2:28:42:e3:e5:68:96:b0:67:54:30:7b:
59:f2:32:21:3c:9c:7b:c5:50:22:f6:f4:e0:7a:40:
a1:d9:b9:26:17:ac:74:58:97:42:33:94:10:7c:f0:
2e:2d:61:da:52:89:e4:eb:d6:51:84:a5:36:d0:6a:
ce:99:b5:e5:af:e8:f4:14:26:bc:86:4e:ab:a6:20:
1f:96:d3:89:26:85:ce:01:e8:cc:11:a2:e3:3a:fd:
6e:57:80:ca:84:2c:2a:65:69:72:52:57:67:e5:ad:
09:4c:15:20:2b:fb:d3:76:af:e0:74:79:5e:27:6d:
31:ed:71:80:ed:29:34:42:a4:fc:36:37:87:2f:54:
de:d6:51:c4:be:06:24:60:4d:ef:b0:fb:3f:f6:9d:
e0:2b:e3:5a:54:4b:71:4a:62:aa:90:50:66:ba:42:
6e:45:d1:b8:ae:6e:b1:e4:1f:07:7b:1d:48:a6:64:
5a:6c:5a:29:9f:8e:79:0e:f7:56:3f:97:ed:a4:f7:
1c:6b:48:69:d0:c2:e1:b9:08:0d:99:60:ea:0e:da:
ab:14:b3:7c:35:b3:39:fa:4c:d5:d4:4e:bf:21:c6:
da:05:5a:e4:bf:b5:73:40:97:98:1b:01:20:19:52:
f2:ee:2c:0b:54:64:6d:9b:9f:60:a0:ff:19:48:85:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.8.0/23
168.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:eb:e7:b9:cd:18:b1:9c:53:c8:94:30:d5:4e:fe:59:40:7b:
00:89:e7:a6:60:dc:a0:43:57:b4:18:46:6b:c3:18:80:ce:45:
e7:85:46:84:fc:01:b1:9a:44:e1:7a:6d:ab:a7:3d:21:99:0a:
cc:26:da:7e:67:5d:b9:18:4a:d5:a7:aa:3c:fc:2f:43:1b:5d:
37:5d:06:e7:aa:1f:c0:a3:4e:1b:93:f1:fd:58:bf:4f:c9:a3:
54:fd:05:40:5e:71:bc:b1:cc:90:70:1e:74:08:4a:06:2c:b2:
ab:eb:79:be:51:f7:c3:09:24:aa:8e:a8:72:11:47:b8:69:c0:
9f:4f:65:88:64:2d:03:51:13:80:70:11:a9:c5:6b:8a:f0:6d:
95:8e:99:69:0c:08:db:43:73:ad:71:ad:af:f4:58:65:54:f3:
a6:91:ad:c3:d9:c5:0f:bd:7f:c4:46:fc:06:3a:ca:93:d1:94:
9a:ee:a9:d1:ab:09:d1:80:d4:73:b7:c1:c9:c5:33:fd:f6:81:
13:29:07:88:0b:e9:31:97:df:e6:70:a6:34:ce:45:a2:19:7e:
8d:64:69:2b:25:b8:f9:bb:a9:52:b9:69:00:2c:35:f0:00:d4:
5e:be:f8:b2:82:74:e7:da:2b:a0:98:1a:57:53:bc:96:ee:ad:
2e:b8:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:16 2026 by rpki-client