Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
File: UK5xbz02ub7q4n8QBo-eNqIzq5E.cer (raw, json)
Hash identifier: maPAICnKfpKX1cjjfbe8Pxvk9p3ACRWAYOy93PfdZwE=
Subject key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029589
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:24:55 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 202.49.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169353 (0x29589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:24:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:46:74:28:19:14:df:de:fd:22:a1:a2:ee:
cb:63:c3:d1:ea:79:de:07:73:9c:82:79:3e:27:88:
8f:45:57:b8:8d:ef:39:2b:a0:1c:fb:df:d5:1d:b1:
ee:23:e2:af:e0:b5:b3:0c:47:81:3a:0f:37:c9:ec:
f5:1b:26:b6:57:89:3b:20:b8:2d:7c:2f:2e:e6:9b:
67:2a:c5:f4:f6:82:49:49:3c:b5:1f:29:a6:e0:22:
3d:e4:8d:eb:05:71:67:35:86:5c:bd:ca:8e:25:be:
aa:76:04:8b:5c:a6:24:03:c3:03:e0:42:f6:e5:0a:
36:49:5f:c4:15:84:77:4c:f6:1c:83:b0:05:40:10:
96:ba:1a:82:42:d6:bb:ac:8a:3f:4b:ba:5a:b6:34:
54:9d:61:fd:df:a1:65:03:22:f8:dd:ec:d1:eb:b8:
0b:40:b4:af:ad:b2:d2:77:82:af:8c:3f:cd:72:05:
bb:18:c0:2a:98:20:cd:a2:8b:30:88:02:f8:74:75:
f1:af:38:5d:db:ad:ec:f3:1a:b6:10:35:9c:d0:96:
d2:8a:0b:42:03:07:bc:62:48:24:87:b7:b2:70:1d:
d7:ad:e5:75:82:06:7d:6e:81:1e:c1:7d:25:60:96:
1e:45:00:cc:2c:6a:6b:01:76:db:7d:8b:4d:af:d9:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:64:01:a8:e8:3a:22:db:07:01:8d:dc:dc:13:a0:9c:df:fb:
5a:23:c2:63:04:e3:a2:9c:ec:c9:d7:12:b4:6a:30:48:2a:aa:
dd:34:d2:7e:2f:f9:0b:aa:c6:af:34:3a:b8:e8:5a:1a:b8:94:
b6:c4:af:7a:fa:6d:57:48:d6:43:48:7b:b3:68:2f:07:a3:29:
e8:e0:53:4a:cb:43:cb:d9:73:20:65:f9:17:49:fe:c3:0e:78:
d9:27:9e:e0:ae:93:2f:77:66:39:6f:94:84:4d:28:1b:25:af:
89:77:b8:61:64:f0:e1:b3:67:81:22:25:bf:bb:3f:a8:f8:55:
ee:bd:a9:b6:64:e1:b5:9c:31:68:26:15:f9:06:4d:e6:4e:c3:
bf:50:63:44:0a:ed:61:3f:62:3c:59:89:da:6e:63:bb:08:35:
49:36:ad:05:2e:7c:cd:0d:5e:07:d3:3a:c5:c3:e4:4b:f5:20:
b2:16:d8:e3:7e:19:64:c6:d4:9e:4f:40:c9:90:76:8f:c8:78:
9b:05:57:23:12:4f:63:16:66:8d:3e:28:c2:bc:11:d8:c8:aa:
8e:21:eb:0a:66:ff:a0:0f:21:05:bb:a1:62:54:0c:10:db:ae:
c0:a0:bf:a8:f2:4a:0a:72:0d:fd:66:5b:2b:e3:15:57:33:4c:
3b:15:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:37 2026 by rpki-client