Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer
File: xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer (raw, json)
Hash identifier: egwoxaqateutPAL6k/iKk0OxfUaFZ6V7q3rIMYEHbO0=
Subject key identifier: C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jun 2026 23:27:06 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 192.156.153.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32157 (0x7d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 25 23:27:06 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A911E621, serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:e6:ce:23:c8:86:38:d7:25:74:cc:5c:a7:
fe:82:90:d7:63:fb:df:d3:d5:cc:c6:02:79:60:27:
71:9d:28:a9:fc:43:de:9b:d8:c1:dd:81:b1:81:f4:
5f:a6:36:53:2e:6e:0b:37:32:9a:fe:4e:0c:ea:9d:
27:f9:15:33:3e:39:5a:e9:87:ae:bd:8e:fb:24:d2:
56:e6:f4:c8:4c:db:ee:c6:bd:76:4f:f1:a4:39:3a:
04:f9:c0:bb:bb:ae:5e:0c:b3:11:c3:6a:31:a0:6b:
69:5a:bc:90:d9:65:e8:22:45:c3:c5:9d:aa:9d:2f:
99:10:ad:74:84:5b:8c:17:16:1f:c8:a9:53:4c:b3:
b4:2d:74:bf:b2:26:a2:76:b2:f8:f5:96:0c:b3:01:
ba:dc:7e:4e:9a:cc:30:58:0e:b3:a9:35:f3:9f:f5:
0d:10:3a:5b:f6:97:7a:88:09:c4:c3:a2:7e:5e:b5:
2e:51:47:85:3e:36:aa:fc:e4:fa:f3:7c:98:e0:c5:
e7:8f:61:57:e7:7e:61:6b:da:24:bb:26:1d:59:d0:
63:93:9f:25:f1:82:0f:bf:18:2b:4a:4b:d1:9f:ee:
d6:3d:39:f4:6a:83:b2:7d:7d:15:39:57:28:67:27:
d1:b2:ea:9c:45:30:df:b5:93:04:3b:f7:10:20:e1:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.156.153.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a9:0c:aa:56:0a:d3:c9:48:0d:59:3e:42:8d:1e:9d:84:62:
8d:ad:b6:50:13:d5:7b:7b:29:1c:80:a7:22:47:35:24:69:1c:
b2:6c:88:aa:d8:6f:a2:9e:97:65:e0:d7:06:af:15:62:4a:80:
ee:33:09:08:7d:5b:2d:7c:2f:e4:ae:9a:48:5e:39:b9:f5:51:
84:12:7c:f9:87:74:74:fc:b0:6e:2e:db:15:20:57:7d:77:4e:
f0:60:08:6e:a1:68:0b:ca:6a:d5:71:15:95:8a:9b:28:73:da:
d7:d0:4b:fc:24:81:2f:fe:ef:20:00:62:35:23:52:84:fc:be:
39:ba:7d:fe:90:82:de:3c:5a:f4:36:33:04:27:97:68:46:f6:
84:d3:85:c1:88:a5:ee:8a:75:d3:c7:b8:5f:69:3a:59:c5:d4:
f2:e3:72:02:b2:40:cc:83:14:f2:8d:ef:dc:93:23:07:15:8e:
b7:4c:bb:fd:dd:c5:31:44:16:27:62:c7:a3:9d:43:b0:10:41:
1d:12:d9:a4:a9:16:9d:4c:20:fc:24:c4:13:44:79:bc:52:74:
23:f5:aa:89:cb:79:ef:8b:08:34:0b:00:61:79:e3:ae:ec:60:
c4:ca:26:c9:c3:d4:1d:57:d3:ce:85:b5:7a:fe:ef:bc:be:b6:
85:d6:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client