Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer
File: UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer (raw, json)
Hash identifier: GaAwm01fF5rQvD2IDTGfFE/lc2ugvZ6k+byEhUyP83c=
Subject key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7BE5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 May 2026 03:33:52 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31717 (0x7be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 25 03:33:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:f1:af:db:fc:88:6e:29:8a:39:32:5a:e7:
4e:ae:4c:dc:ee:3d:62:23:2e:60:32:60:bf:4d:bf:
25:04:0b:70:74:0d:f6:f1:4b:0d:f5:9e:94:dc:77:
5d:b4:cc:c2:fd:88:e9:41:5f:75:8f:68:28:c7:97:
ad:cd:d9:64:76:c9:93:fc:95:7e:d3:23:e3:a9:cc:
46:6e:bd:a7:47:5c:b8:be:96:09:41:84:5d:a7:79:
f7:6a:84:4e:fc:09:df:a1:e7:9b:37:21:9c:e0:85:
68:7c:58:a1:61:55:3f:e2:1d:1a:f7:ab:02:9d:9c:
97:b8:36:e2:1b:26:2f:33:c7:06:cb:4c:06:16:13:
65:22:3f:5f:17:94:88:7f:ce:d2:e1:86:95:36:6c:
d5:dd:39:39:73:41:ca:e2:35:41:8b:d2:49:34:32:
89:1c:17:3d:36:0f:6a:6a:c3:4a:a7:0c:a8:a7:3d:
f3:0e:0f:88:c9:62:87:84:47:ec:f9:e8:01:d9:ed:
2a:64:c7:99:6c:70:9d:5a:df:c3:65:26:8a:4d:56:
ed:5c:07:a4:cc:85:12:56:ac:15:ea:8f:f4:67:66:
6c:36:da:dc:4d:ca:93:2e:7c:82:fd:08:ae:27:01:
d7:ba:00:ec:bf:1e:2d:4a:09:ec:ef:80:37:64:c1:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.178.0/23
Signature Algorithm: sha256WithRSAEncryption
96:33:12:9c:d4:cd:9a:5f:a1:d8:a0:bc:81:6e:a2:ed:35:65:
08:ce:f7:c6:ed:0d:a9:11:bc:9e:b2:04:aa:be:de:38:df:97:
bc:b8:69:4c:db:e4:cc:0a:9f:bc:60:76:fe:58:b0:4e:5c:da:
37:c3:57:72:4a:77:c1:e7:fa:f8:a6:17:f7:8e:39:93:ef:52:
d5:ec:6d:3a:50:16:c9:20:47:60:ff:fc:9a:56:91:02:29:f2:
79:f4:9f:bc:40:56:4e:dc:ba:7f:ff:fe:4e:3d:ab:0e:06:dd:
8c:fb:12:dd:a2:a2:1b:4e:3e:1d:5d:8a:9e:36:45:3b:ef:4c:
ea:43:7d:20:da:05:19:55:6e:cb:03:7b:dc:ee:13:2e:ab:69:
92:67:53:7a:96:8c:31:92:bd:16:77:1e:00:43:fc:3a:93:66:
0f:6f:7f:a4:ae:38:2e:44:58:bf:da:c8:e0:04:b3:05:6a:6c:
bb:35:ca:7f:0a:68:0c:d5:59:03:38:6d:da:74:b2:fc:28:79:
c5:e4:11:fa:89:8d:8f:d0:0b:b4:d4:89:95:4a:28:4f:6b:a5:
20:21:29:22:81:fc:bb:b5:8d:c9:e3:e2:0d:11:45:94:93:0e:
ab:53:20:f1:e4:5c:81:78:f5:78:9d:16:e0:6b:8b:57:7b:5f:
4b:96:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client