Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer (raw, json)
Hash identifier: C7t9ZKlSEoq3QadfBLUlTxL2gDO2sbf5ZhujZ5aSBN4=
Subject key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 558B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 13:28:46 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:11::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21899 (0x558b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 25 13:28:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:0d:6a:72:29:3a:21:5d:68:4e:15:55:23:
7f:e2:a6:2e:a8:63:a4:0a:0d:44:52:e2:56:ff:61:
39:97:19:7b:aa:27:dc:77:56:3c:71:e0:f5:18:e0:
90:b3:4f:8b:35:49:fd:a1:5d:bd:6c:c1:a6:58:e2:
75:11:d3:c8:82:5b:3f:f1:cb:d0:93:48:d4:f0:87:
d0:e7:55:4e:fd:91:26:4c:9a:6b:10:b4:39:b7:64:
3c:af:60:b9:d8:bd:7a:85:0f:10:08:31:68:e8:b8:
c6:ed:50:0d:b8:58:fc:eb:15:fe:4b:49:04:24:dc:
52:c7:b6:40:e7:02:95:81:17:72:5d:15:d3:c5:e6:
cc:cf:05:65:6b:23:a1:f3:3f:ec:96:46:33:c9:91:
9a:ba:16:7a:59:50:e9:62:8e:38:96:49:60:a9:0d:
69:8c:d5:84:51:79:fd:d9:cd:34:5e:82:0a:43:f0:
77:7c:24:74:2c:15:7d:cb:e5:02:16:ce:70:03:a2:
a6:04:c9:a5:80:b9:b8:61:ba:2f:b7:fb:d0:d7:55:
52:6e:a4:05:6d:89:83:4a:2a:7a:b6:ea:dd:9f:13:
20:85:c9:24:66:60:d6:ba:06:27:97:43:66:c3:75:
1c:71:54:99:33:d2:d4:d5:0f:8a:d9:78:66:0e:68:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:11::/48
Signature Algorithm: sha256WithRSAEncryption
9c:a4:9d:79:f7:44:11:43:fe:0c:fa:12:17:e6:61:1d:42:d4:
b2:28:b3:99:1f:56:4a:f9:04:79:33:66:09:b4:15:af:63:1e:
fa:72:ad:b6:ac:dd:c0:4a:c3:28:ca:c6:06:1c:a0:98:03:ce:
10:ea:16:45:86:e6:a1:e3:e5:d1:74:15:82:a8:4e:59:2e:1d:
e9:1f:25:e4:28:b9:09:43:ed:cc:4f:90:c5:6a:a0:f2:79:14:
b0:4d:63:ab:2b:f1:29:f8:a5:bd:41:e1:6e:1c:9c:ad:e2:90:
2f:a4:c6:8d:d5:f0:b6:2d:20:bd:80:bd:7b:86:e2:fc:19:2c:
a0:4b:ad:13:90:49:03:75:f7:b5:e7:d1:5a:38:69:e2:24:52:
ac:cc:e6:96:d0:ef:a1:a7:b7:5e:95:0b:52:67:88:18:a8:c7:
b2:bb:a4:2a:9f:a5:b6:b7:97:9c:f7:d9:73:58:55:37:79:cd:
54:ea:3c:6a:71:4e:c9:16:73:fb:a4:9d:ac:30:73:ed:b2:e8:
ff:32:2f:8b:ad:31:39:2e:3f:3d:55:a1:75:57:c2:68:38:34:
0b:04:77:ea:3d:08:1b:89:0d:d7:da:75:fa:a3:08:e3:6f:84:
4d:4c:6c:01:5d:70:84:4c:fd:82:c3:18:94:be:68:74:be:2b:
dc:3e:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:15:16 2026 by rpki-client