Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
File: wUJMTMxZyaAxvhrN95gth6tX0Gg.cer (raw, json)
Hash identifier: GAkLUkMnpSUjomG+2WEnZQAl/39qA4O42M/w47QA/eE=
Subject key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D185
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Aug 2026 21:10:43 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 4857
AS: 17536
AS: 23646
AS: 23723
IP: 202.147.96.0/19
IP: 203.82.160.0/19
IP: 203.201.64.0/18
IP: 221.120.128.0/19
IP: 2405:4740::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184709 (0x2d185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 21:10:43 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:9a:a6:14:5a:c8:9f:4f:79:03:97:03:01:
f8:c3:d5:3a:6e:5d:13:5c:14:de:a4:6f:c6:83:cf:
85:52:9f:b4:23:5d:5f:77:04:20:d7:cd:d2:c1:4c:
6f:08:80:1b:5f:6c:f7:7e:19:a7:58:14:23:75:44:
41:3a:c8:78:a8:a2:1f:fa:28:df:6a:da:19:51:72:
d2:ec:c1:9e:fe:ac:ce:33:1d:e6:6d:dc:f2:34:4e:
c6:e9:68:fb:9f:79:a8:45:bf:d1:bc:66:66:e5:f8:
9f:d1:ce:6f:14:54:e3:f5:3c:57:ee:a4:a2:fe:49:
fd:40:ce:22:96:c1:ee:b2:5b:43:ee:49:e8:7c:c1:
75:22:b7:c5:b1:e4:f2:f9:a5:96:e5:15:d0:f1:d2:
5e:ed:45:d4:86:cb:8b:bd:b3:d9:ce:85:81:b1:62:
aa:69:5d:dc:5d:2e:63:dd:fb:94:4c:fa:d9:6c:91:
7d:6c:f8:04:89:36:c7:06:71:8f:9a:e3:a1:89:d1:
d3:e9:36:88:13:84:50:8b:b7:25:19:54:d5:5c:e6:
3c:43:b6:4d:6c:28:36:6f:a0:e1:59:3b:37:90:a8:
1a:cb:48:6e:e7:b4:4b:ba:26:ff:4c:d3:f2:88:fc:
31:05:34:ce:9d:4f:db:64:63:7b:69:58:7c:56:77:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4857
17536
23646
23723
sbgp-ipAddrBlock: critical
IPv4:
202.147.96.0/19
203.82.160.0/19
203.201.64.0/18
221.120.128.0/19
IPv6:
2405:4740::/32
Signature Algorithm: sha256WithRSAEncryption
81:ef:5e:6f:68:9d:37:52:55:27:0e:78:af:46:50:ed:c5:a8:
41:07:c4:1b:59:08:f4:6f:d3:f5:d4:af:62:ac:de:d1:dc:b8:
2f:03:68:0c:08:76:40:4a:35:e1:03:49:ec:01:9d:e5:f6:ba:
11:d2:f9:ab:a1:73:ac:27:e6:48:f0:a0:0d:e6:54:88:89:14:
43:64:d9:52:55:90:5c:10:51:d3:aa:7e:97:d7:f5:60:da:14:
c0:be:61:aa:9e:38:1c:31:5a:ca:e8:6d:97:9a:d5:7d:a6:dd:
0f:fc:c1:0c:08:ac:58:9e:d8:34:9c:20:b2:aa:89:59:58:47:
43:4b:12:ca:59:3b:85:5a:ba:08:fc:66:3f:b7:38:18:17:15:
76:f6:e1:65:86:35:69:37:01:a1:2d:29:c1:6c:fa:26:ce:75:
19:e1:67:f8:fa:8a:4e:80:44:66:e7:58:42:16:d1:a6:ab:d9:
64:95:01:89:2b:9f:a5:28:c7:8c:8f:62:3f:9a:1f:6e:ba:17:
fb:cf:60:68:88:35:3a:ef:87:0e:6c:46:45:9a:ee:9b:99:6b:
33:ca:cb:59:68:82:1c:1f:e0:10:95:2a:09:bd:67:c1:09:79:
f6:f8:97:88:56:b8:91:a1:04:11:44:00:d6:90:0d:08:d7:5e:
58:86:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:49:10 2026 by rpki-client