Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
File: u4iGb_vrTN7pUxHmIJ92pQG8G48.cer (raw, json)
Hash identifier: Razeg17sS/mwjkyFq+J5zVJMUnR8OvcimfdvNAuKYUU=
Subject key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 02:27:02 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.170.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32345 (0x7e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 7 02:27:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:e6:e0:52:ff:21:a7:de:c0:be:cb:e0:24:
70:32:b8:10:68:d2:12:67:f3:ec:2c:77:19:18:6f:
95:f2:d3:44:b8:40:ab:c7:4e:eb:1e:f4:09:3b:26:
03:ce:a6:6d:d7:8b:8f:bf:f4:66:e7:5e:cb:b2:24:
c8:86:0e:b1:bc:dc:da:6e:8b:05:c1:63:53:0e:a6:
94:f1:02:3f:72:7e:f5:28:b3:a5:0c:a9:9e:1c:48:
a9:79:8c:13:02:37:68:03:c1:37:13:67:72:98:45:
cf:34:ac:eb:d5:84:2e:e9:ff:d6:24:08:12:e7:58:
80:db:e4:da:8b:29:f0:b3:0c:33:88:a9:f5:9c:61:
5b:d8:cc:d4:fb:91:3d:71:e8:06:5d:f9:10:99:fc:
80:ae:0f:1f:56:5e:23:e0:55:71:77:d4:0e:2b:dc:
c8:2d:7d:f0:b2:be:79:a0:2a:b7:be:28:4e:6a:39:
9c:a1:b6:9a:cd:38:e4:f2:a8:45:81:31:fe:b7:2a:
05:85:3a:2b:78:9b:4b:36:fb:fd:80:2b:6b:e3:36:
06:1a:ef:9e:23:97:e5:73:6e:d8:9e:42:90:2f:a0:
55:e9:17:b6:76:5d:b6:01:ea:64:55:c3:2c:f0:f1:
e3:fb:2a:14:01:50:ed:c9:d6:6e:57:4a:d0:0d:5f:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.170.0/23
Signature Algorithm: sha256WithRSAEncryption
88:e2:0e:1c:cf:41:8d:f6:cf:44:f8:69:82:27:37:04:14:6c:
21:b5:52:e8:36:4f:99:6b:62:cb:d7:7d:78:1b:66:4b:fc:e4:
a5:2e:da:22:fd:b9:2a:3b:21:97:7a:6a:e1:79:23:fc:23:c6:
8e:98:0f:90:a6:07:1d:2f:50:9c:09:bc:9a:7d:00:99:64:f9:
15:b2:b0:1e:a5:44:3a:43:a1:35:cc:6f:0b:c7:a2:81:70:89:
84:2f:bd:fd:e5:bc:a9:75:6c:69:0a:28:67:33:04:09:bd:a8:
ca:4c:31:b5:94:15:34:57:a3:de:17:89:25:3c:af:5c:bf:c0:
a5:41:d8:0b:da:8d:07:5d:0c:61:7a:50:0f:a7:77:9b:12:1f:
ae:1c:f5:05:4c:57:fd:8b:54:0f:d3:91:6b:c2:bb:0f:68:43:
14:e1:0d:21:ee:35:9b:1c:c5:19:c6:09:76:cd:31:c9:ea:40:
4f:3f:f6:5b:e3:43:63:58:fe:b8:e4:69:8a:bc:ac:ec:e1:e3:
91:b9:1d:af:c1:da:4b:a6:d4:85:2d:9f:2d:bc:41:59:11:91:
99:1c:ca:2b:af:51:c0:4b:bb:a1:6f:6c:6e:b0:bf:c1:f2:12:
a9:61:aa:c9:92:70:db:19:b1:d3:f5:42:0e:29:f7:6e:e6:09:
08:da:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:33 2026 by rpki-client