Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.cer (raw, json)
Hash identifier: k7PmyzPj7clNYOBCuhm7tuvnmkfPi06bnzsrA/f7P1E=
Subject key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 51F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:20:26 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 86.54.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20977 (0x51f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 2 13:20:26 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:22:07:49:7c:ec:32:a8:24:48:3e:7b:91:
43:38:2f:5f:b4:60:83:ec:d7:2d:72:99:87:47:60:
7f:0f:31:65:c0:27:e8:e7:b6:67:cb:99:52:e9:a0:
a8:6d:0c:ce:a8:3f:32:6e:49:7a:00:98:c9:a2:4b:
82:5a:67:28:ec:8a:51:23:0b:b7:81:35:be:86:99:
6c:f7:a6:c8:07:31:58:bc:f4:aa:8b:af:01:bd:ec:
8b:fa:10:c7:fe:fc:34:d8:a2:c6:f6:4a:c9:5c:fb:
c1:71:d2:7a:5c:1f:2e:88:6b:7a:dc:56:5c:99:36:
22:b5:5f:99:34:d4:11:18:e9:cb:92:35:bb:88:41:
8f:9c:d4:6d:3f:4e:e2:f8:39:c7:57:49:05:57:f2:
a3:15:71:25:d6:27:69:10:d8:b3:8c:a2:91:12:33:
8d:79:9b:cb:a6:f6:93:96:56:06:59:fd:0c:db:8b:
26:5e:96:60:cc:c5:f8:28:c7:9a:e1:15:3b:da:43:
a0:ce:84:ee:eb:ca:39:46:db:ed:1d:da:44:d2:4e:
b3:2c:38:48:73:e8:06:28:16:34:54:23:94:d4:cf:
ef:80:3d:63:26:3e:af:7c:b3:86:ba:4d:ef:08:a1:
67:de:9e:e3:d3:77:8b:27:de:25:3c:e2:01:ec:c3:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
86.54.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:ab:6b:2a:aa:d5:c7:57:6b:42:88:5c:53:17:34:a9:bf:10:
4c:8c:2b:d7:6f:e9:9b:7b:69:13:b9:45:96:89:71:18:a3:d2:
cf:0d:d4:62:ba:05:99:7d:bd:a6:46:42:7a:86:9a:21:d8:54:
3b:17:74:b3:96:14:16:fc:e6:87:52:b6:b0:5d:5c:23:78:f6:
1f:e8:50:ed:0a:9a:65:60:a6:6c:9d:3a:ef:78:fa:96:f2:b9:
22:9e:91:f0:dc:ca:17:21:42:70:a0:83:df:2a:b6:e2:ec:09:
c4:9b:77:1c:82:a6:8b:bc:3e:81:60:12:8a:4d:a7:8b:1b:66:
39:20:a2:28:21:16:ec:35:55:56:4c:19:97:83:f0:17:ca:e1:
18:36:52:e5:c9:96:9a:86:4d:ab:d1:5a:77:57:2c:ac:f3:d7:
06:ed:65:b7:b7:a5:78:2d:0f:3b:7b:b4:ae:dd:c6:dc:e9:d2:
93:c8:5d:b6:04:74:11:88:35:a5:56:57:2e:28:95:76:71:dc:
d7:ed:7f:77:cd:c7:dd:be:ee:af:26:ea:95:d8:4b:af:03:5a:
08:59:77:82:2b:5e:21:35:50:42:44:a3:17:e9:63:f9:c8:26:
0d:13:44:14:b7:0d:73:09:48:3f:b5:3f:1b:c6:6e:fc:34:cf:
1d:fb:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:02:41 2026 by rpki-client