Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer (raw, json)
Hash identifier: dayj1+QgzZTU4weK8u8/lR+CjBngq8HE0aNL4L1PgGU=
Subject key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A047
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Feb 2026 12:50:09 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 4848
IP: 202.88.200.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172103 (0x2a047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 12:50:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:58:46:02:35:d3:55:75:a1:dc:0a:46:ce:
b1:97:aa:7c:81:e7:66:55:9d:ab:a8:27:7f:44:e1:
7a:54:82:a0:45:18:c0:d6:4f:cd:66:02:4f:c4:b8:
41:ef:2f:a1:8d:50:ea:c5:f3:39:4c:d4:08:2c:22:
cc:b1:9d:e8:a0:95:92:5f:4b:63:6c:d9:43:55:11:
8e:9e:ef:11:57:1d:f2:72:c2:7f:6f:8d:03:47:3f:
09:11:4a:0c:2c:63:f7:10:f6:7f:89:1d:de:a7:31:
95:28:83:4c:23:ff:51:5d:07:9c:d1:27:74:45:56:
db:d1:cb:74:18:c9:2b:bf:17:3b:17:d1:e1:8d:c5:
59:b2:46:58:9b:47:98:b0:e3:ea:ed:3d:98:91:97:
b4:03:f4:52:88:63:db:ba:9e:89:39:de:cb:ff:24:
aa:1a:af:bb:7f:98:49:dc:d3:cb:2d:3d:26:92:b8:
1b:b1:fb:90:16:05:52:2d:93:de:b1:de:78:d3:f6:
6c:1a:44:be:34:b0:1b:54:d2:74:7c:1f:fa:65:43:
68:ec:ec:9a:7e:f0:7b:fd:42:25:f7:fa:a3:8b:0a:
15:e5:29:04:a5:28:c8:77:04:4f:15:5a:f4:36:16:
85:48:36:c5:2e:fc:23:6b:a3:b8:1d:1b:d8:4c:1d:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4848
sbgp-ipAddrBlock: critical
IPv4:
202.88.200.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:8c:6b:c2:f2:29:de:61:eb:61:8f:80:e7:52:53:a1:a5:10:
bf:40:24:f9:e1:0e:5a:8f:44:dd:bd:0e:79:ce:66:1a:37:f2:
db:36:f7:18:01:0e:0e:d6:db:fd:53:5c:8b:a3:dc:45:91:19:
a6:3d:82:16:76:fe:3c:37:20:cc:3b:ae:d8:52:0c:d3:64:a4:
df:34:09:75:21:48:5c:d9:ca:7b:b9:62:a3:9e:10:b5:73:23:
65:ec:7e:a4:f0:e5:fb:33:c7:01:10:f6:df:9a:3b:07:9b:7b:
0b:97:9e:69:68:2f:38:e9:28:34:e1:5a:bc:56:c9:e4:48:78:
e2:63:fc:51:84:f3:e5:8d:86:04:29:f0:50:4f:2a:94:a3:e3:
ad:6c:d0:79:dc:c4:1c:de:76:07:d1:7b:9e:3f:83:b7:8d:d1:
ee:8a:78:43:d6:db:72:59:28:ba:2f:fe:b2:fd:ac:53:db:6f:
f6:9b:3e:13:ce:82:d8:cb:ed:76:d6:11:48:d7:45:eb:ba:c7:
52:ba:2f:f8:13:cd:b2:b3:9a:95:1c:33:e7:30:27:47:4d:ec:
5d:99:ed:61:fd:dd:9a:51:a3:72:b1:9f:15:4e:a3:ba:47:81:
49:69:9b:e8:4e:9e:2e:4b:4e:75:49:fc:27:df:f4:58:70:6b:
1a:e2:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:36 2026 by rpki-client