Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
File: 01UDTjnACz53K-oBQambzhQnrfQ.cer (raw, json)
Hash identifier: TtPiRTklZJZj4Cis3JNW0hcDQPog/Ye7rXP3hkyZtEI=
Subject key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78DE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 10:17:00 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 162.145.0.0 -- 162.147.255.255
IP: 164.97.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30942 (0x78de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 24 10:17:00 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:f4:53:66:c0:36:7d:5c:5c:4b:ea:8d:f7:
7e:23:39:bc:7e:06:ce:42:e2:d3:88:08:12:36:98:
82:4f:9b:0e:41:c3:c6:5a:7a:6d:bf:ab:c0:01:52:
c1:e5:c9:82:3d:a5:b8:d9:15:64:32:c0:01:d0:ad:
ae:6e:f6:ba:30:44:f7:c7:d0:c3:dc:15:af:45:db:
59:23:84:93:07:01:4b:f4:cc:0a:16:c5:60:32:f5:
59:d0:da:85:b4:43:9c:e6:38:24:04:1a:70:df:1f:
49:06:1d:41:46:e0:d4:b0:94:c6:51:44:1a:5f:36:
12:53:6c:74:06:a4:a1:13:41:1a:9e:c8:56:22:c6:
00:e7:67:c6:d3:78:73:4c:67:c1:25:af:7b:50:0e:
d4:b8:ea:50:06:b0:e6:7c:f9:bb:45:4a:25:be:84:
9b:65:92:f9:61:02:eb:24:0e:09:4b:d6:03:f2:1e:
ef:58:39:0f:f2:b3:a0:3e:d0:0b:7c:59:89:03:d8:
29:ad:9e:67:e9:c8:8e:bb:4e:c8:22:40:e8:99:b3:
ef:0d:ee:96:38:ce:eb:b1:84:39:e2:1a:9d:8e:ca:
f6:68:10:d4:69:cd:88:af:6d:b3:1e:00:10:95:9e:
9d:02:cd:59:8c:d4:1c:1e:29:28:dc:6f:6c:dd:65:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.145.0.0-162.147.255.255
164.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:da:3b:73:42:db:ee:84:99:a2:dd:00:31:8d:0f:92:a0:f6:
47:d6:2d:a0:76:98:38:c2:41:52:51:62:4f:69:00:fa:95:31:
38:a8:39:67:84:a3:16:41:44:cd:fa:46:2e:86:7b:a6:4f:71:
66:8e:db:30:97:5d:b2:4a:d9:be:3f:14:4e:83:67:a0:e0:02:
20:8b:3a:ad:f9:c4:9e:f7:0e:c7:a1:5d:be:05:3b:e2:51:f6:
cd:7d:05:73:f0:b0:70:f5:11:26:2d:84:33:29:d3:5c:20:2d:
72:80:08:82:0b:55:3f:1a:84:43:b4:58:f6:df:ce:b2:8d:9a:
d6:ad:68:94:bb:04:61:b6:ab:45:de:c9:f7:b4:09:b6:8c:14:
1d:b0:13:be:3e:c3:07:8b:8e:ff:b4:dd:ae:3b:f8:b2:90:bf:
37:ae:d7:30:7c:69:3b:77:01:e3:44:e0:83:f3:5c:d5:2e:fd:
5e:f2:d8:aa:34:34:8b:31:d8:bb:bc:a7:5a:43:48:ea:26:6b:
01:82:ea:e3:05:af:49:0a:3b:e5:d7:87:64:31:c4:67:d0:59:
e7:ff:89:19:cd:ed:4f:c3:93:9e:e4:a4:67:a7:a6:b5:42:04:
d6:79:5f:71:98:42:13:e9:67:56:04:2e:e8:f7:ae:55:80:fa:
7b:5b:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:13 2026 by rpki-client