Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer (raw, json)
Hash identifier: 0+ihjfHEIgbnnAZ1STcNxs7FrfMdDhTG9lRwWk2X/h0=
Subject key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4D8B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Sep 2025 18:42:22 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:11::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19851 (0x4d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 26 18:42:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:0d:6a:72:29:3a:21:5d:68:4e:15:55:23:
7f:e2:a6:2e:a8:63:a4:0a:0d:44:52:e2:56:ff:61:
39:97:19:7b:aa:27:dc:77:56:3c:71:e0:f5:18:e0:
90:b3:4f:8b:35:49:fd:a1:5d:bd:6c:c1:a6:58:e2:
75:11:d3:c8:82:5b:3f:f1:cb:d0:93:48:d4:f0:87:
d0:e7:55:4e:fd:91:26:4c:9a:6b:10:b4:39:b7:64:
3c:af:60:b9:d8:bd:7a:85:0f:10:08:31:68:e8:b8:
c6:ed:50:0d:b8:58:fc:eb:15:fe:4b:49:04:24:dc:
52:c7:b6:40:e7:02:95:81:17:72:5d:15:d3:c5:e6:
cc:cf:05:65:6b:23:a1:f3:3f:ec:96:46:33:c9:91:
9a:ba:16:7a:59:50:e9:62:8e:38:96:49:60:a9:0d:
69:8c:d5:84:51:79:fd:d9:cd:34:5e:82:0a:43:f0:
77:7c:24:74:2c:15:7d:cb:e5:02:16:ce:70:03:a2:
a6:04:c9:a5:80:b9:b8:61:ba:2f:b7:fb:d0:d7:55:
52:6e:a4:05:6d:89:83:4a:2a:7a:b6:ea:dd:9f:13:
20:85:c9:24:66:60:d6:ba:06:27:97:43:66:c3:75:
1c:71:54:99:33:d2:d4:d5:0f:8a:d9:78:66:0e:68:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:11::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1a:c0:7d:e6:56:bf:ec:16:fe:c8:a2:bc:90:b8:be:11:eb:
9a:5f:c4:ae:e6:da:60:cf:41:82:71:2f:cc:81:ed:f9:f9:86:
c8:30:9c:11:f7:eb:4f:35:16:de:b1:7a:0f:55:8e:10:aa:b1:
91:04:c0:4e:79:42:d4:de:ca:37:71:fc:46:55:a8:74:3e:c9:
21:b1:d7:07:82:9c:1c:17:2f:50:f4:ac:50:ce:7f:7e:0e:39:
b6:45:66:53:94:6b:cf:ca:b8:82:d6:9a:3e:80:d3:0d:e7:ad:
3b:3f:57:b1:0f:66:16:00:29:e6:d2:42:44:f4:95:ed:b2:d3:
56:48:4f:a3:da:97:b2:17:af:c7:57:1a:74:35:fd:a4:b5:57:
43:1c:74:e8:92:ab:19:8c:1f:a5:95:28:ce:0c:fc:01:51:02:
52:a6:db:e0:cb:4f:58:0e:a8:4b:e4:c5:dd:fb:ef:9f:62:72:
ed:72:b1:d4:ad:9a:d4:1b:95:2c:30:e9:b8:57:ef:16:f5:96:
e3:78:76:ff:e8:21:c2:0e:cb:57:d0:86:29:38:09:06:db:ae:
00:d5:4c:b8:c7:15:04:fc:8a:f6:a5:3c:26:91:27:81:64:7e:
f3:ca:85:57:ed:ad:71:0d:d4:de:15:58:1c:80:47:67:23:3e:
37:0a:55:b2
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgICTYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwOTI2MTg0MjIyWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RUY1MTExMC8GA1UEBRMoNTJENjgwRTA0NURDRTk5MDc4OUUwRDc3
NzI2MTdDNjBDMzZFRDE4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOiuDWpyKTohXWhOFVUjf+KmLqhjpAoNRFLiVv9hOZcZe6on3HdWPHHg9RjgkLNP
izVJ/aFdvWzBpljidRHTyIJbP/HL0JNI1PCH0OdVTv2RJkyaaxC0ObdkPK9gudi9
eoUPEAgxaOi4xu1QDbhY/OsV/ktJBCTcUse2QOcClYEXcl0V08XmzM8FZWsjofM/
7JZGM8mRmroWellQ6WKOOJZJYKkNaYzVhFF5/dnNNF6CCkPwd3wkdCwVfcvlAhbO
cAOipgTJpYC5uGG6L7f70NdVUm6kBW2Jg0oqerbq3Z8TIIXJJGZg1roGJ5dDZsN1
HHFUmTPS1NUPitl4Zg5oPxMCAwEAAaOCAvYwggLyMB0GA1UdDgQWBBRS1oDgRdzp
kHieDXdyYXxgw27RjjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVGNTEvQkEzQ0Q0QTYzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlFRjUxL0JBM0NENEE2M0Q4MjExRUE5RjI2NzM3MEM0RjlBRTAyL1V0YUE0RVhj
NlpCNG5nMTNjbUY4WU1OdTBZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABB/oAETANBgkqhkiG9w0BAQsFAAOCAQEAThrAfeZWv+wW/sii
vJC4vhHrml/ErubaYM9BgnEvzIHt+fmGyDCcEffrTzUW3rF6D1WOEKqxkQTATnlC
1N7KN3H8RlWodD7JIbHXB4KcHBcvUPSsUM5/fg45tkVmU5Rrz8q4gtaaPoDTDeet
Oz9XsQ9mFgAp5tJCRPSV7bLTVkhPo9qXshevx1cadDX9pLVXQxx06JKrGYwfpZUo
zgz8AVECUqbb4MtPWA6oS+TF3fvvn2Jy7XKx1K2a1BuVLDDpuFfvFvWW43h2/+gh
wg7LV9CGKTgJBtuuANVMuMcVBPyK9qU8JpEngWR+88qFV+2tcQ3U3hVYHIBHZyM+
NwpVsg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:29:08 2025 by rpki-client