Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer
File: UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer (raw, json)
Hash identifier: sENzX6qlgMolNZ8UnmjDSyneVmANaNWVh732agUBWqg=
Subject key identifier: 51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80C6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 10:14:04 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 192.42.52.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32966 (0x80c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 10:14:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91393AF, serialNumber=516DE126AFD45A7999B4246230D7F109592E4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:94:3d:ce:0b:86:ec:b8:b4:0e:61:bc:5b:
b8:41:93:c8:bf:fc:6b:f7:ad:34:7c:d2:fb:34:b9:
7f:81:3b:8b:f0:8d:3a:6b:a6:c8:79:20:2b:60:9c:
64:e7:33:85:e2:c6:33:39:8f:9f:f3:87:70:e3:f7:
28:04:4e:7a:13:f7:04:93:71:62:16:84:35:84:8d:
da:cc:0b:06:f5:5c:84:37:06:a9:d7:54:0d:2a:ef:
b8:13:b2:32:68:10:13:38:59:f1:1a:d0:e0:61:ad:
94:99:8d:d8:75:5b:d2:7e:66:28:5c:c3:6b:4a:e1:
6f:a2:ea:e2:d5:8a:cb:74:dc:25:ec:1a:ac:18:6d:
1b:a7:fa:4c:af:2e:cb:33:da:03:a2:c8:8f:5a:bb:
f2:02:b5:00:89:8b:9a:08:a6:7b:ca:6d:d6:e7:89:
59:6c:76:e7:a4:80:b4:05:20:d3:5c:29:92:6d:60:
35:6a:90:78:12:19:20:08:5c:87:63:a2:a5:e0:d9:
28:38:85:8d:e6:e7:07:d3:6e:f6:79:37:2f:a1:76:
25:21:e4:b6:c1:37:23:b3:eb:e4:30:82:93:e7:93:
53:2b:32:48:e2:8b:32:73:fb:90:f2:0a:ec:d1:06:
50:77:81:bb:93:a8:e4:a6:ca:9b:20:13:11:a5:e8:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.42.52.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1e:7b:45:01:9a:f5:3f:b8:b2:76:ad:ec:04:29:77:8b:51:
8f:1c:c4:10:62:94:5a:37:b4:92:7f:06:4c:c6:eb:d6:bc:6b:
c0:74:e7:a0:ea:9d:55:25:96:ef:34:ed:02:67:b6:aa:26:5d:
3a:ca:70:46:bc:90:db:f6:40:bd:76:3e:69:ef:01:93:fe:79:
eb:20:a9:a2:65:db:df:65:ec:4e:80:d7:33:c9:41:22:0d:94:
30:77:f1:f3:86:7b:dd:7e:b2:20:6b:7f:c2:ff:93:66:43:23:
c9:8a:4d:63:f8:03:c8:e4:d6:c4:5b:67:70:12:79:62:c0:33:
ff:85:8c:cb:0d:89:9f:e9:c0:c4:a6:b3:7f:22:33:e0:79:58:
c9:cd:83:c6:7c:c8:8d:2a:ea:ac:e5:6b:0d:c5:8f:ba:3a:82:
83:f7:9e:7a:37:6b:e9:d4:21:90:cb:69:9b:a2:17:e4:4e:bf:
9d:6e:28:57:90:3a:2d:08:37:00:7a:dd:11:52:54:6a:f6:62:
a2:e2:8b:74:8d:37:35:d9:1b:32:b3:b1:87:82:1d:27:f7:1b:
b5:68:50:32:9e:7d:6e:80:69:b8:a1:a5:d5:2c:54:ae:3c:8d:
9b:c8:8f:5c:3a:92:34:9b:6f:56:47:01:86:be:7a:97:ce:82:
5a:a2:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:53 2026 by rpki-client