Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
File: 01UDTjnACz53K-oBQambzhQnrfQ.cer (raw, json)
Hash identifier: 8Bcrqn6JdslDRTwKqZiQ5ezE8SbpmmIs89A9QBrWmzg=
Subject key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B91
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 May 2026 13:20:39 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.145.0.0 -- 162.147.255.255
IP: 164.97.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31633 (0x7b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 18 13:20:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:f4:53:66:c0:36:7d:5c:5c:4b:ea:8d:f7:
7e:23:39:bc:7e:06:ce:42:e2:d3:88:08:12:36:98:
82:4f:9b:0e:41:c3:c6:5a:7a:6d:bf:ab:c0:01:52:
c1:e5:c9:82:3d:a5:b8:d9:15:64:32:c0:01:d0:ad:
ae:6e:f6:ba:30:44:f7:c7:d0:c3:dc:15:af:45:db:
59:23:84:93:07:01:4b:f4:cc:0a:16:c5:60:32:f5:
59:d0:da:85:b4:43:9c:e6:38:24:04:1a:70:df:1f:
49:06:1d:41:46:e0:d4:b0:94:c6:51:44:1a:5f:36:
12:53:6c:74:06:a4:a1:13:41:1a:9e:c8:56:22:c6:
00:e7:67:c6:d3:78:73:4c:67:c1:25:af:7b:50:0e:
d4:b8:ea:50:06:b0:e6:7c:f9:bb:45:4a:25:be:84:
9b:65:92:f9:61:02:eb:24:0e:09:4b:d6:03:f2:1e:
ef:58:39:0f:f2:b3:a0:3e:d0:0b:7c:59:89:03:d8:
29:ad:9e:67:e9:c8:8e:bb:4e:c8:22:40:e8:99:b3:
ef:0d:ee:96:38:ce:eb:b1:84:39:e2:1a:9d:8e:ca:
f6:68:10:d4:69:cd:88:af:6d:b3:1e:00:10:95:9e:
9d:02:cd:59:8c:d4:1c:1e:29:28:dc:6f:6c:dd:65:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.145.0.0-162.147.255.255
164.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:14:33:bb:87:46:e2:d1:a0:e3:c0:d0:a9:4a:4b:e3:49:e6:
b3:88:87:d8:d8:f1:34:b3:c3:45:9a:c4:fd:59:44:7f:20:4c:
91:40:72:d8:f1:39:8d:b9:78:40:59:94:d5:a3:fb:4b:73:30:
29:72:7c:37:b2:d7:e1:1a:12:a4:36:59:45:29:f4:e9:30:bb:
c6:68:a0:f5:6a:c3:f6:03:2b:8d:97:52:c4:d2:c3:c2:3b:95:
e6:1e:52:ea:91:5e:99:9f:72:9e:81:c7:3c:b7:77:fb:34:12:
03:bf:b9:cb:81:40:fc:af:4a:a9:75:60:88:ac:94:4d:f1:e1:
9b:0d:a8:ec:ae:cc:1e:5c:2d:e8:77:66:d0:b5:99:58:64:cd:
d6:58:e2:cf:2d:b4:60:80:0d:91:6e:48:c8:10:62:46:d0:62:
60:c8:7e:4f:97:a3:31:e5:65:56:3e:00:0e:78:b7:57:fb:aa:
01:e2:d3:82:da:88:6c:7e:97:0c:46:22:59:a8:53:4e:a3:a8:
55:3f:49:04:d7:18:37:49:c4:4b:dc:99:03:13:4b:0c:d6:28:
be:1c:49:6c:24:14:a7:a8:2f:58:f5:88:d6:48:dd:8f:eb:54:
f1:2d:6e:2d:f6:d6:18:da:a6:3a:63:23:88:5c:3e:b9:1d:d0:
bd:f1:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:18 2026 by rpki-client