Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
File: UG49HcCtxzidnNuq-lFwdBtVhho.cer (raw, json)
Hash identifier: yxZxEtK3Z2KAhepuc7062NJfRl1zFDpup/hegNCkAWw=
Subject key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7827
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 07:31:48 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 198.15.26.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30759 (0x7827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 3 07:31:48 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:5b:20:24:0a:4d:23:f6:3d:6f:b6:0e:e4:
ac:a3:48:71:cf:bb:17:3a:45:83:74:5a:8d:3c:a8:
cf:79:8f:03:a6:17:d9:03:fb:9f:92:4b:f9:6f:2a:
96:7d:a3:50:93:e5:9e:06:2c:7e:0b:10:5c:70:b0:
cc:5d:ae:82:0a:9b:b1:11:5a:4f:5a:e9:c4:69:18:
33:2e:b3:79:02:27:fa:ab:56:13:4c:a1:b5:e7:c8:
90:b0:19:21:47:a3:15:ed:11:80:6a:90:a3:d6:65:
b6:a1:4e:67:cd:7c:03:22:6e:2d:30:a9:11:6c:f8:
9b:cb:02:0d:fc:bc:1d:ac:0a:4a:80:cb:3a:e2:30:
2e:7b:34:83:03:77:4f:4d:c0:fa:a0:94:2e:d4:92:
36:b9:ba:3d:f2:58:ba:b2:36:e0:89:c9:84:ec:c8:
0d:82:81:cd:ba:24:9a:e8:b3:88:84:68:6d:fb:6f:
38:25:a5:54:f5:19:76:a5:a8:36:a2:d3:a2:8f:89:
fa:fe:a2:3f:b8:32:f4:08:d5:10:70:63:e4:e1:61:
2e:5b:9b:24:dc:8f:6f:14:18:cf:ed:47:b1:b1:00:
84:ae:03:11:a6:44:ad:5d:d5:c6:ed:46:a1:5f:c0:
4b:27:55:99:a4:4b:3b:9a:57:81:8e:ea:2a:13:f1:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.15.26.0/24
Signature Algorithm: sha256WithRSAEncryption
29:66:8d:da:fb:ff:41:75:ea:5e:ae:ee:0e:5d:0b:20:41:55:
02:32:43:c9:05:6c:8a:24:68:98:af:8d:8e:47:18:36:9f:d8:
f6:e1:96:1e:41:b6:20:a5:72:f0:5f:9e:9d:61:6d:b4:0b:bd:
5f:5e:79:85:cb:21:1f:2c:53:ae:08:13:71:3d:1c:f3:90:5e:
85:f1:52:e7:20:b6:b8:dc:62:1b:9a:b5:33:38:44:e4:a0:84:
3b:c7:cc:0b:5d:66:e3:74:49:8e:80:99:14:14:33:53:1b:31:
1d:ef:67:f2:32:06:b4:65:84:c4:71:e3:ee:30:76:35:b2:4c:
a7:bb:25:e3:1b:f8:35:2f:17:47:fc:0a:77:be:b3:2f:cc:28:
fc:48:23:60:45:87:2e:3c:89:d6:71:23:40:02:48:26:e3:89:
75:1f:1c:c4:bb:1d:01:91:dd:73:90:11:ea:de:9a:77:f2:10:
19:6c:f0:0b:e4:1f:ff:b9:59:d4:e8:c2:01:51:c0:af:bb:89:
e3:2a:37:2f:98:c7:70:66:f0:15:87:b6:a5:f5:cc:eb:7e:34:
b1:37:d3:12:81:89:54:a4:eb:b6:10:c7:da:ca:98:31:e0:14:
6c:bc:3e:90:4e:bb:f5:91:2f:72:da:a7:14:b1:a1:4c:66:c8:
ae:b0:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 07:02:43 2026 by rpki-client