
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
File: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (raw, json)
Hash identifier: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=
Subject key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A32
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 May 2026 00:12:02 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 186.240.192.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18994 (0x4a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: May 15 00:12:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:14:c1:c9:02:63:0b:3d:cd:ec:24:a3:aa:
b7:51:26:b1:f2:e4:36:ba:29:3f:eb:2f:b1:b6:8e:
19:2b:60:f1:59:dc:3e:dd:14:3a:87:3d:0f:cf:9a:
1c:f4:1d:47:48:98:a9:0f:6f:38:3c:11:4d:62:53:
dd:e5:1b:bd:ef:52:3f:4a:5c:ba:f9:f8:d9:d6:ba:
67:ef:30:69:f6:55:59:f4:ee:ca:41:35:a1:1d:7a:
e1:e6:24:56:93:c5:fe:be:82:a1:9c:e9:d0:9b:2e:
98:e5:3c:53:70:36:d2:1f:86:ef:e2:95:3b:ab:c5:
82:3d:4e:1c:bd:82:75:3f:1e:78:93:05:8f:23:20:
48:68:88:68:5d:e2:f0:5f:a6:ab:1d:01:43:80:e2:
fc:3d:5e:59:88:f2:a8:92:98:6f:96:96:21:51:0d:
dd:14:ba:d7:55:3f:24:6a:ff:9d:2a:e1:57:d6:3c:
aa:dc:ea:bb:5b:05:3f:8b:ad:82:ea:81:2d:69:dd:
c8:c8:59:b5:7b:2a:93:d9:79:ec:8e:72:cc:ce:01:
d4:5a:27:7c:2d:c0:b6:35:a5:11:96:a7:30:c4:6c:
1f:d8:53:d2:23:16:31:7f:16:5b:5a:c6:7c:5c:92:
78:75:46:c5:17:8c:88:cc:76:73:44:64:82:6d:fb:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
186.240.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:7c:74:86:7d:ae:e0:52:65:24:e0:b3:f1:02:ed:d4:06:cf:
00:28:77:b6:ef:f4:d0:ab:a5:e4:31:ce:b9:fe:18:2c:25:38:
7b:cf:16:06:84:21:47:80:7c:7b:46:16:6d:66:cf:57:3d:f4:
9c:6a:96:4e:fb:21:56:fd:9c:28:d9:7d:2c:04:3b:14:a2:c1:
64:cf:80:60:76:1c:0d:aa:f4:5d:3e:fc:5b:68:f0:53:73:95:
de:92:80:f8:99:1f:ee:f8:b8:66:69:f1:6f:4f:d1:0a:f0:2d:
6e:54:e1:35:6b:07:5b:36:9f:17:b5:a7:53:92:56:de:4c:b6:
c1:fe:ce:08:bb:6e:2a:a3:aa:97:e2:9d:8d:2d:7a:bd:89:40:
10:d2:b3:e7:27:64:fc:6c:1f:3e:ec:59:23:c3:be:92:38:dc:
e5:ad:5b:c5:8b:8b:50:6a:86:c6:d8:8f:39:3c:3e:2b:30:bf:
c2:70:ba:e8:0d:c5:6d:21:84:ee:c4:d5:bb:0b:39:9b:1c:ed:
7a:63:db:c2:9f:c6:c2:2b:ac:59:da:92:84:0a:1e:87:4e:c6:
8b:3c:c6:7e:55:8e:57:bf:85:00:23:0b:23:6a:02:44:ef:0a:
60:df:84:fd:99:d2:81:fb:44:19:38:ef:2e:0c:ae:28:ad:9d:
5b:6a:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:42 2026 by rpki-client