Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
File: UYdFx6LySigtdUZZUC_WYh3HYYQ.cer (raw, json)
Hash identifier: GWa2omzLNKveRJEcyCQ9b1enclsW5sMFCgekPIzTdCc=
Subject key identifier: 51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8135
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Aug 2026 00:27:26 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 130.130.0.0/16
IP: 192.35.248.0/24
IP: 192.70.135.0/24
IP: 192.131.251.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33077 (0x8135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 00:27:26 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A915FE2E, serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:88:ae:86:65:a7:cd:3b:7f:c2:04:90:79:
c3:59:b2:14:35:a4:5d:69:52:c4:ac:e2:32:ea:df:
97:d4:37:08:87:9f:ce:0b:bf:9f:56:77:bc:2f:8f:
70:e7:29:3d:bd:4c:19:7c:1a:f1:d1:c4:ec:d9:0d:
74:41:10:6e:1b:8c:3a:07:1b:a3:b5:cf:4a:fd:fb:
aa:00:3c:87:b8:22:92:0d:e7:23:bc:c6:d8:95:88:
65:d8:fa:70:f4:a7:f1:39:d8:9c:42:12:3d:9c:91:
ba:d5:97:5d:98:a0:df:c4:68:e7:cb:bf:40:24:54:
9f:6b:b1:59:d6:45:7c:bf:86:14:7b:db:70:6f:5c:
f9:dc:15:45:52:bf:d4:64:07:da:71:6f:63:9e:28:
62:6d:27:58:bc:fc:14:1b:1a:6d:83:98:6e:3e:fe:
46:12:ea:91:4f:86:cf:26:f0:2b:3d:83:a5:10:df:
9a:5c:ef:26:bd:25:62:e2:2a:e7:3e:6d:37:be:3b:
c4:3e:36:11:05:51:93:27:01:e3:90:ad:8c:f3:39:
e4:b5:bc:d9:cc:b7:8c:25:a7:4d:80:24:79:14:77:
7a:a4:44:e8:56:29:37:d3:e0:98:c1:c5:09:ca:4a:
ec:55:b8:6e:3a:ff:ed:89:39:8b:de:7e:b4:ad:58:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.130.0.0/16
192.35.248.0/24
192.70.135.0/24
192.131.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fc:8b:7f:c0:f7:52:81:57:b6:20:7d:d8:a8:75:69:b0:52:
6d:c6:4b:31:44:d3:1c:6c:c2:f3:7f:8a:27:06:62:27:ce:58:
19:44:43:44:9e:3d:30:a9:48:fe:a3:3f:46:ae:f8:4e:d8:bd:
a6:aa:78:1e:0e:da:f1:4c:35:f5:d1:05:17:7b:b5:ae:55:e8:
74:e8:e6:17:40:d7:4d:e3:a0:97:d2:7a:33:d8:70:a0:d2:af:
a7:50:71:2b:62:74:76:11:1c:91:c7:fe:fe:59:44:3f:7f:60:
d7:ee:8e:53:63:a5:67:73:7e:54:a7:40:c8:23:96:a8:67:cf:
8b:ce:00:6d:83:ac:99:ab:1b:38:23:a2:34:59:f6:1c:82:39:
8c:7f:1a:55:d9:89:a9:d9:0c:51:89:02:22:87:55:3a:6b:5b:
08:c7:aa:f4:84:5e:e8:b7:81:7f:c9:44:44:1c:7a:94:9a:f6:
04:09:9c:f0:ae:da:ec:8d:dc:04:97:98:38:63:5c:c3:dc:c2:
d0:a8:e7:0a:19:ab:4c:f3:4c:09:67:31:5e:e6:f7:04:95:8e:
de:fc:36:3a:46:0d:fc:bc:e7:70:7e:08:a6:06:a6:89:ce:c0:
28:9a:a9:28:e5:ce:a7:a6:4c:94:a3:e2:87:7e:ac:e6:2e:3e:
b0:ca:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:10 2026 by rpki-client