Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
File: ufrcQefh-XVse8mz3jlyy_bPYLU.cer (raw, json)
Hash identifier: 7FkcNM18YDnwDZH2TwNYJceh6OW7OtrKkJCIUHWXYcU=
Subject key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:07:04 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153587
IP: 163.61.91.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171658 (0x29e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:07:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:8f:8a:08:44:65:f9:e3:76:c5:69:20:8f:
b0:5c:06:69:15:e0:ca:39:5e:cc:dc:2b:59:ac:f5:
31:78:82:40:ce:72:11:22:0b:6c:4f:56:9f:97:88:
93:db:68:43:cf:2d:e1:10:bc:37:dc:f1:2d:7c:86:
a3:d6:ab:82:ab:65:93:e2:57:0a:93:70:0a:fa:b1:
ac:a7:ac:b9:c9:9a:fc:6b:55:3f:6f:49:ee:d6:53:
99:68:50:ae:2f:f8:3f:1d:d1:06:ec:3d:8f:f9:3a:
38:44:90:5f:68:17:b7:74:7a:f9:cc:30:b2:02:c6:
b0:c1:02:f7:ee:6a:3d:0f:52:10:ec:4d:b7:0e:4d:
e8:49:c1:b1:f3:2f:08:02:b0:ee:88:9e:4b:c0:80:
5d:11:81:6e:ad:8a:6d:6c:2b:92:64:89:2d:08:8d:
94:a5:b2:87:07:7a:1f:6a:1a:77:ef:9f:6a:18:f6:
43:ac:4b:3c:b0:5c:1d:63:c1:24:73:f5:1d:e7:58:
68:0f:3d:f4:fb:72:59:ac:0c:02:d8:5a:dc:f3:fd:
fa:95:03:c8:ce:94:f8:ff:dd:32:05:f0:cc:5e:23:
63:a9:56:68:22:08:82:4d:68:af:5e:b6:5f:91:e1:
d9:20:56:44:8d:a6:dc:19:30:c1:46:d7:a1:68:57:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153587
sbgp-ipAddrBlock: critical
IPv4:
163.61.91.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ee:87:77:35:97:d9:d1:45:ef:c5:4c:ce:a5:f1:96:f3:29:
d9:1d:55:36:d7:dc:a9:9b:c2:e6:4d:d9:92:05:6a:ef:ad:9a:
f4:c9:90:d7:54:22:98:33:f5:4c:5a:b9:6a:68:85:43:38:ac:
d4:67:fd:03:bb:1e:1b:4e:57:27:e6:0a:d8:19:d9:7d:5e:25:
d5:4b:e9:e9:90:9f:b5:b6:20:08:3f:cf:8b:0b:28:05:87:b4:
d6:a4:32:12:3f:87:f4:f0:50:6b:99:18:0b:f1:fa:f2:a1:08:
11:69:8b:f2:d7:c7:df:fb:e8:7b:a8:25:51:74:85:1b:65:fc:
39:40:b5:b0:cb:09:9c:07:25:5b:a0:66:1b:6a:15:db:1b:5e:
72:fd:81:73:b8:b5:67:98:fa:23:c2:aa:f7:04:65:54:53:c8:
35:6e:25:81:87:3a:bd:be:e2:f5:56:66:03:af:95:8f:e9:85:
56:6e:e9:a6:2c:2d:3b:8d:0b:b7:db:04:44:b2:b5:8e:06:4d:
0f:d5:fe:e5:22:e6:23:da:9a:6c:f0:fd:c9:f6:a2:56:54:41:
9f:c5:df:19:fa:36:68:a4:ba:c7:00:2f:b4:88:5d:82:5c:71:
e0:31:de:2e:1b:3b:1f:fc:1c:0f:29:3a:70:b2:05:45:7a:9b:
33:a4:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:16 2026 by rpki-client