Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
File: ujlCdcT_j47yNHSaNvKhkTknlVs.cer (raw, json)
Hash identifier: zNYQivhTNZSPurdNo0q9WkYhSR5mw1b4N0wpdwjos/I=
Subject key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B6D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 May 2026 13:11:00 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 43.243.108.0/22
IP: 103.231.28.0/22
IP: 2405:fc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 13:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177873 (0x2b6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 25 13:11:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:65:02:7d:4a:8f:bc:39:57:a8:d2:60:51:
ae:eb:cd:bc:46:74:9d:42:07:0e:f9:28:df:c2:eb:
ac:9a:12:6a:c3:d8:a5:cc:e9:63:09:d2:8a:f5:c8:
3f:61:3f:97:dd:48:5f:fa:cb:0b:db:99:c8:54:30:
5d:2d:70:71:e4:69:e0:92:63:df:0c:51:cc:44:03:
f9:3e:71:e8:45:13:7d:07:26:59:b2:70:4d:20:95:
b9:35:6b:77:d4:b1:2d:bf:7f:0e:00:98:a4:79:6d:
d4:65:ce:99:30:7f:73:3e:fa:f1:3e:3e:69:d0:db:
7c:ad:1a:58:da:5c:40:c9:1c:fb:49:3b:9e:82:32:
8a:76:13:00:6e:78:f5:54:53:63:29:01:54:f1:81:
0d:5e:1f:45:40:27:51:75:96:2a:bf:03:f0:ca:4e:
06:71:8a:b6:10:fa:16:85:7a:b5:60:b0:4d:92:58:
97:a3:20:4c:f9:bf:32:05:a2:f3:67:34:2a:39:a6:
bb:35:4f:15:30:c4:fe:35:de:cf:17:77:a2:23:34:
7b:25:41:b0:59:fa:13:17:c7:02:ea:d9:6f:5e:19:
55:d3:cd:87:cb:6e:82:c9:79:8d:af:5a:f9:22:a2:
87:dc:ca:75:d2:db:e4:a6:fc:af:1d:b0:ef:81:bd:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.108.0/22
103.231.28.0/22
IPv6:
2405:fc40::/32
Signature Algorithm: sha256WithRSAEncryption
c2:76:e9:66:34:34:f6:44:1e:56:c3:3f:8e:c1:a1:82:9f:a8:
31:d5:56:3f:76:b0:e0:40:2d:9b:1f:d9:41:c3:18:fa:e4:4a:
62:8b:2b:0d:b2:a7:34:bd:4e:e4:cd:19:ac:c4:31:dd:92:ca:
15:5a:58:be:ce:b9:2c:ff:ca:0a:76:16:e3:bf:df:8c:f4:9b:
ae:a7:57:11:44:27:5d:ef:0b:f7:b1:23:08:8b:a6:ea:c1:e5:
41:3c:f1:d0:91:9e:b5:fc:80:0b:60:ce:0c:25:9a:4b:60:40:
8f:25:55:d5:30:a0:e4:f4:31:c9:14:bf:f6:97:a9:1c:bb:0e:
0c:55:7e:c8:2c:d7:a2:68:cf:92:d9:d6:b1:c1:79:28:81:0d:
af:b5:78:be:c6:cc:25:8c:3a:4f:2c:f1:1b:6e:c4:84:4a:54:
73:14:0e:ee:c8:72:01:d3:53:03:71:26:16:5c:95:8b:9d:04:
e2:af:32:0e:05:af:f8:1b:b8:36:15:9c:5a:f5:58:4d:09:98:
07:00:9a:c0:27:25:9b:95:85:97:2b:a6:68:14:cb:6e:7f:e5:
3e:39:f7:28:58:06:7d:45:51:64:10:45:4c:47:72:90:af:c2:
f8:23:60:51:9c:44:1b:82:44:b0:34:1f:8a:aa:2a:fa:9d:1e:
06:87:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:50 2026 by rpki-client