Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UziV_5cQZMHfT0HNxw-YXFBr5Q0.cer
File: UziV_5cQZMHfT0HNxw-YXFBr5Q0.cer (raw, json)
Hash identifier: VUHFdyKWPtVTgFq1G0WJcAUG2uRCNsUpliVLcPEikeU=
Subject key identifier: 53:38:95:FF:97:10:64:C1:DF:4F:41:CD:C7:0F:98:5C:50:6B:E5:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9114747/0FD0BD54980011F19779D6E73111F970/UziV_5cQZMHfT0HNxw-YXFBr5Q0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9114747/0FD0BD54980011F19779D6E73111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Aug 2026 16:49:11 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.86.12.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32958 (0x80be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 14 16:49:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9114747, serialNumber=533895FF971064C1DF4F41CDC70F985C506BE50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:f3:15:fc:35:84:25:8f:a5:a3:f7:d3:e7:
8a:92:02:93:75:ac:78:3e:fb:43:c6:03:0f:f2:ce:
8a:c7:cf:cd:ba:dc:fc:cc:f9:69:18:ef:af:15:18:
52:02:58:5e:e2:2a:b9:cb:bd:b2:d4:ef:80:cf:8c:
32:f2:b5:1e:62:e9:a9:1a:c2:cf:a7:00:62:1a:47:
88:5d:3b:46:fa:a2:27:ff:69:e3:66:9d:c1:6b:df:
bf:cb:17:09:d8:81:3d:e9:1d:20:81:44:3a:06:a2:
a0:a1:0b:e3:7e:4d:e5:57:be:03:0c:34:c7:e1:dc:
bf:3d:84:4f:91:c5:ed:84:f5:13:63:1d:33:a9:ad:
5e:83:27:c9:bd:82:d0:63:8a:b2:0c:ae:53:47:d0:
8f:32:7d:5f:7f:2b:1a:2c:a8:53:50:d1:bd:42:d0:
f5:cd:04:77:0a:93:eb:17:e8:e2:4e:ce:5b:c8:92:
0f:b2:02:be:f6:31:99:c5:56:bf:54:3a:73:1c:6b:
c0:99:13:40:12:38:6b:aa:c4:01:db:03:6c:e3:25:
b3:53:76:31:50:b1:b8:c3:41:9f:77:4e:2c:b9:82:
05:0b:92:be:2f:42:75:f5:7d:b2:ef:d9:b9:4d:39:
8b:8a:70:a2:e4:77:48:7b:fd:fb:4b:0f:69:b2:65:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:95:FF:97:10:64:C1:DF:4F:41:CD:C7:0F:98:5C:50:6B:E5:0D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114747/0FD0BD54980011F19779D6E73111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114747/0FD0BD54980011F19779D6E73111F970/UziV_5cQZMHfT0HNxw-YXFBr5Q0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.86.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:97:3c:4b:7d:4e:24:11:fe:d0:90:70:e4:e7:85:9d:59:3a:
fe:f1:39:40:b4:44:7f:d6:b6:62:3c:3c:7d:67:52:33:36:16:
70:02:ca:42:d6:ab:38:0e:8b:72:dc:0c:e1:5a:db:47:71:f5:
b8:85:11:da:cf:77:b9:73:3e:26:48:ea:3b:20:7b:2e:23:54:
27:73:47:2e:67:72:a8:eb:0c:3c:70:c2:a1:ed:6e:7f:ac:9c:
d7:d2:e9:1d:4e:8c:82:aa:6e:14:b4:92:e0:31:6c:5b:a6:a8:
8c:8a:ad:64:b8:c6:57:87:79:84:50:63:ec:fe:50:2b:4c:25:
1a:ce:fc:d0:ef:15:c3:51:2c:07:c0:3d:36:03:3a:e5:47:2a:
c7:b9:44:41:63:be:e1:32:d0:45:b6:24:de:66:49:7a:73:c3:
29:a9:d3:99:dc:cf:60:95:94:f9:93:f3:d8:eb:3b:a5:64:99:
ed:9f:fa:f5:72:0e:b4:6d:5e:6c:c9:70:10:56:74:d5:cb:e1:
79:97:d4:8f:cc:7e:f0:f2:20:e2:00:80:83:82:ac:d9:b9:db:
61:38:48:33:b5:3e:08:29:c4:dc:ac:95:a7:b0:a3:cb:98:e4:
af:4a:19:8d:48:93:7b:f7:5e:9a:21:f2:b5:6f:78:52:f4:ed:
b8:0d:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:46 2026 by rpki-client