Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuiCGu42H7rX_ezhHFdTbTlLwe8.cer
File: wuiCGu42H7rX_ezhHFdTbTlLwe8.cer (raw, json)
Hash identifier: FxG3mYfF+6iE9poCwKKqpkLpIqTV+NKufJXY3Y297M4=
Subject key identifier: C2:E8:82:1A:EE:36:1F:BA:D7:FD:EC:E1:1C:57:53:6D:39:4B:C1:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 799D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/wuiCGu42H7rX_ezhHFdTbTlLwe8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Apr 2026 16:13:16 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31133 (0x799d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 7 16:13:16 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91FB5C6, serialNumber=C2E8821AEE361FBAD7FDECE11C57536D394BC1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:8b:2a:cc:af:29:36:03:74:be:6f:25:ed:
cb:0d:9f:81:7f:ed:58:67:48:55:ae:2c:6e:97:e6:
80:9d:b0:99:56:f2:f3:30:a2:e7:1b:56:30:91:85:
51:20:fe:2d:d8:cf:f0:64:82:1a:9b:b9:e4:52:e1:
4d:87:48:a5:b3:f5:f6:32:d0:5c:67:cd:3e:2c:1d:
02:ce:23:96:bd:90:d4:88:f7:ad:d0:18:8d:43:d6:
57:c5:23:09:80:aa:3e:3d:07:52:e4:d0:09:7a:8f:
24:71:80:66:78:d7:ca:db:ca:5a:fb:5c:e1:ff:a7:
4d:e9:df:a6:e6:00:14:d6:ae:45:44:5b:1d:c5:3b:
5d:bf:15:9d:f2:d8:1f:b9:44:b3:09:ec:ba:93:b0:
67:2f:9b:c8:5c:6d:8c:0c:cb:a2:e3:88:7b:e2:e3:
3c:55:0a:60:09:88:fb:4f:30:76:af:f8:16:d7:97:
9d:f6:1a:ad:d9:95:d7:7f:ef:ca:70:03:f3:fd:06:
44:5d:74:22:b2:f5:27:3a:6d:f5:dc:12:fe:29:5e:
fd:40:dc:18:00:f6:a5:ab:1b:8d:62:01:67:2a:85:
d1:8b:2e:97:40:fa:c1:c0:08:6d:f7:07:4a:96:8a:
ec:75:61:76:4d:6a:94:a8:64:91:4c:11:fc:57:c4:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E8:82:1A:EE:36:1F:BA:D7:FD:EC:E1:1C:57:53:6D:39:4B:C1:EF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/wuiCGu42H7rX_ezhHFdTbTlLwe8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.76.0/23
Signature Algorithm: sha256WithRSAEncryption
85:7e:db:48:e0:45:0a:0e:96:9f:7c:65:8c:85:99:ef:5e:f9:
10:7c:9d:c3:46:4a:20:99:dc:26:1c:93:17:d5:59:5c:42:74:
6e:fc:b4:0d:35:1c:f2:f8:3c:49:dd:4f:5e:1b:41:a0:79:a4:
56:6b:b9:28:e2:4c:94:c2:63:f2:a3:f4:da:3d:13:15:12:78:
ff:9f:c7:69:24:8c:a1:9b:0c:00:3a:fe:17:b5:b8:ff:2e:00:
4a:bc:1c:53:b9:89:ef:36:f7:ff:07:1d:40:e1:09:82:37:51:
7d:44:c6:de:e1:d1:68:bd:12:b7:af:8b:80:b4:5d:fb:f7:7f:
ba:be:d9:9a:4a:18:00:2b:9a:d3:6f:90:e9:7d:28:7e:ae:df:
2f:7c:9e:6a:0d:56:ec:3c:3a:fa:40:a5:94:a5:25:ab:98:04:
cc:d1:c6:b7:4b:21:4a:12:e7:6d:d4:fd:98:43:c0:1f:b9:07:
0b:8c:f2:21:9c:c7:a1:59:08:e8:df:27:1b:59:95:ef:53:88:
fb:6c:49:00:ed:98:f2:36:ae:c8:89:95:e5:dd:78:d8:08:4c:
19:a1:a8:a7:fc:02:57:65:91:78:2f:22:5e:67:52:0b:8b:bf:
96:95:d5:37:8f:c1:b7:13:ab:74:a2:83:ad:03:e0:6e:e1:65:
5b:81:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:35:07 2026 by rpki-client