Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer (raw, json)
Hash identifier: vxig1BKowmnET6lkG8FaVSJoPYJVxCcCsOYT5sOUBGk=
Subject key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8041
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 13:30:49 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 12:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32833 (0x8041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 13:30:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:18:9a:d3:0b:f5:59:32:04:fc:a3:36:81:
52:0e:5d:ab:7b:bf:ad:8a:b4:9d:a7:ad:d7:df:d4:
ea:1a:3f:6e:2f:9d:75:d7:fc:94:72:d7:1a:32:ce:
ff:8d:83:d0:ab:07:a4:43:b9:fe:b1:d3:65:da:96:
30:18:24:f1:11:a6:43:cc:c1:96:79:b9:59:11:95:
23:9d:e6:a2:99:93:1c:10:7f:77:2c:4b:5f:e1:aa:
ee:40:f7:91:a5:10:94:63:bb:79:7c:b4:48:99:76:
e3:86:6f:02:a9:fb:1b:37:ca:f7:7e:1f:61:12:cb:
8f:7a:0e:7d:48:5b:08:c1:f8:5e:63:10:fc:dc:e6:
c4:64:85:4c:c4:47:e9:ae:36:74:8a:77:76:f8:52:
58:37:5b:a5:64:4a:2e:ca:87:16:26:3a:ce:63:13:
5b:c2:b2:8f:80:78:16:2a:32:b6:e6:22:b4:1f:c4:
72:5d:83:3d:ec:77:3f:18:c2:bb:59:0d:94:49:9d:
2b:fa:35:91:a1:6f:25:40:71:33:c3:31:e3:bc:bc:
74:6f:65:39:51:60:44:c9:2e:1b:fb:23:6b:39:b3:
e7:bb:d2:e3:f9:9e:15:d0:1f:53:a1:ad:f0:8c:a4:
36:a9:8a:8d:1a:28:24:8c:b3:e2:a6:94:c1:10:fc:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.218.0/23
Signature Algorithm: sha256WithRSAEncryption
93:72:ee:3b:93:b3:f0:d5:a6:45:a1:70:42:06:80:e0:bc:63:
86:f2:67:3f:79:be:1e:2d:e1:c6:a9:cb:cc:ac:af:94:cb:77:
7d:93:26:4d:59:40:4e:b4:18:50:94:5b:e5:76:79:dd:29:b8:
7b:90:39:5f:c3:1e:5b:3d:31:f3:29:3c:15:37:7b:db:00:8a:
27:8c:12:fb:ce:6b:7e:55:1f:75:95:18:75:1d:d5:81:25:af:
54:20:47:77:db:cd:63:00:aa:4e:93:7f:15:8a:b4:53:00:5a:
63:43:d1:0f:2c:80:2d:0f:cf:82:0a:4d:8b:4c:ce:a9:18:08:
23:9e:38:85:7d:d6:25:3c:b7:f8:11:5d:fa:61:9c:d5:9a:c8:
b3:f3:67:0b:29:84:e5:80:9d:4c:2a:3e:7b:43:cb:c5:15:03:
49:ac:85:b2:6e:d1:33:f8:61:4f:08:ff:95:c8:73:30:e4:d2:
99:0f:75:09:3f:a3:b1:cd:03:73:34:b6:28:4c:2e:07:e4:f6:
48:b5:20:b8:ce:1d:09:f1:13:40:44:c7:d3:aa:61:4d:8e:f6:
f9:7c:45:8b:36:a8:34:af:db:bd:14:c4:7f:bf:11:5a:0a:c5:
b6:62:db:a3:96:82:7e:2a:e1:5f:b4:d8:02:4d:10:37:0c:01:
62:4c:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:23:39 2026 by rpki-client