Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
File: UkKKuo4K7IH5nXzYknKnEHQIbEY.cer (raw, json)
Hash identifier: bDb9TD88Up5fwRf48cIo10FKU8QNTX8AlOt80t52z38=
Subject key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D13
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jun 2026 09:41:28 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.252.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32019 (0x7d13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 16 09:41:28 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:79:91:76:85:28:bb:b5:72:85:e2:db:79:
57:1c:10:3f:c9:1f:91:76:33:d1:5c:7b:28:1b:72:
25:e3:28:4e:89:1e:53:d0:2a:ad:88:64:f8:2a:97:
a5:c2:71:ca:34:75:5c:cf:7f:c5:38:37:1a:28:7b:
49:e1:cc:df:d0:60:2c:54:22:51:95:ac:c3:8c:f2:
c8:d7:33:24:10:0f:97:5e:1d:69:06:6b:1a:79:a6:
be:43:60:eb:b6:9e:6e:62:79:34:e8:5e:56:e6:4b:
ef:ea:8f:71:45:86:eb:94:f2:8f:3e:71:f7:81:33:
32:84:16:ae:6c:99:15:9b:ff:4f:13:9a:2d:46:3e:
0d:df:f4:3f:7b:df:6f:c7:ff:de:29:e9:b9:14:3c:
42:f6:ca:c4:5a:f9:f1:d3:6b:1c:5c:69:11:bc:34:
c6:6d:b2:9e:2f:4a:55:5d:54:37:a7:4e:47:5a:52:
5c:83:7b:1b:b0:99:85:e0:ad:9f:23:e2:64:0f:ef:
a7:22:e1:af:f7:ea:f9:1f:10:0a:7b:a7:fb:c6:19:
9c:06:e0:62:0f:f1:46:03:88:d3:db:31:69:6a:3a:
a8:37:fb:39:1d:26:22:6d:df:36:5c:f6:ab:3c:cc:
1b:21:d0:39:6e:76:f7:bf:d4:19:12:30:9c:ba:8f:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.252.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a8:0e:48:93:ba:db:c1:4f:a3:b1:6e:ad:5b:03:29:9e:c7:
13:c4:04:9c:9d:f3:f3:05:2c:89:e1:a6:a3:a1:3e:36:aa:f8:
a7:86:fc:1d:56:5e:7b:4e:93:2c:fd:9c:61:52:fd:08:9a:af:
6e:61:a3:a5:0e:3e:69:a6:43:75:84:b5:1c:f2:98:00:c3:f5:
75:59:63:05:35:8b:ec:ac:15:04:51:e6:b8:93:06:df:24:a2:
cc:51:df:b1:45:8e:6b:6e:7f:60:d7:4e:ca:af:d9:2f:ff:e0:
6c:34:52:0d:0a:50:61:4b:ae:9c:8f:48:f0:71:4f:5c:4c:29:
f1:29:a3:13:d5:1c:cf:ad:db:8e:94:0c:d3:ff:ec:db:e1:1f:
8c:dd:41:dc:36:14:a5:2f:fc:80:6b:07:55:3c:98:7b:8c:e8:
2f:13:4d:6d:0f:2d:de:6a:2d:e6:68:f3:72:f6:16:a9:fc:29:
1e:3b:92:40:4c:6e:d9:4c:2c:6c:d6:0c:ab:d6:d9:2b:04:c7:
ad:7a:03:ef:96:29:7c:e0:c7:64:bf:67:76:7c:85:fb:80:86:
9d:46:9d:4f:d1:96:ef:4e:9b:e8:87:03:3f:c5:32:38:55:93:
73:de:64:79:92:e9:82:82:4a:74:98:8d:aa:f4:cb:69:0e:54:
85:a9:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:33 2026 by rpki-client