Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer (raw, json)
Hash identifier: g9ih4ATCw/UQh5XW5rqt54TvuUosyBQ7/UZgdfJ1ryk=
Subject key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Sep 2025 19:22:42 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27474 (0x6b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 22 19:22:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:6c:64:8e:46:83:10:29:e6:9e:d8:2d:ce:
a6:80:a5:55:25:16:e6:f3:2e:dd:1b:e6:57:3e:cb:
34:d5:7a:80:56:e1:62:45:4e:f2:76:77:5b:19:86:
ef:b6:41:3f:b5:c3:15:05:5f:90:08:47:a7:a6:60:
9d:95:e2:cd:ee:79:42:be:5f:40:49:b2:23:e5:f9:
5b:b5:a2:03:5c:7b:fb:36:d4:0d:04:69:d1:d9:1d:
ea:ea:f7:88:a6:11:b4:b6:71:35:21:b6:c8:80:df:
57:86:97:0b:4c:e4:e4:7e:da:54:d6:1d:e6:b6:d2:
60:b8:9c:6a:dd:d5:8b:ed:d8:70:91:47:73:7a:fb:
d9:c7:24:98:8d:5f:db:32:86:b3:c3:55:80:c0:3c:
96:8b:0b:6e:0f:02:13:ee:4a:03:0b:d2:0e:32:76:
88:42:48:4e:43:bc:38:e6:4f:0f:ef:07:c5:c6:56:
3a:6e:6f:a6:ed:e6:d5:fa:b9:11:3c:f8:9f:a3:94:
a2:8d:e0:de:bd:f8:13:39:e7:c9:18:a3:eb:6d:5e:
11:ee:9f:2c:77:bd:db:16:82:4e:dd:48:2f:ff:d3:
25:89:25:4a:1f:7d:b3:5b:c2:6d:b4:2b:50:b3:6d:
6b:a6:d8:73:12:87:11:29:fe:ae:ca:a4:76:b2:ab:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.100.0/23
Signature Algorithm: sha256WithRSAEncryption
93:55:99:f4:0a:e9:ca:c1:9b:b4:d3:88:53:52:cf:52:0a:0d:
a4:45:1a:1a:40:6d:29:30:6a:a6:41:91:86:77:f6:2c:0c:33:
e3:91:11:e2:6b:ea:67:ab:37:3b:ce:99:0c:fb:90:ec:e2:74:
33:b3:e7:45:c8:f2:89:81:07:c6:dc:92:35:a4:8c:d7:eb:44:
ad:97:7e:e2:e1:96:ea:9d:f7:28:4c:c0:59:66:01:74:d4:37:
90:ec:06:3e:e2:18:60:c4:42:cc:d0:21:93:ee:a0:6d:6d:35:
c9:40:c0:c0:13:42:53:16:f2:9e:20:fd:65:5a:05:5d:82:ab:
b7:e0:d9:0d:fd:d9:9d:0d:21:79:4c:d7:df:73:31:c9:19:98:
91:1f:34:65:3c:9b:ec:20:96:cd:e1:52:79:ea:49:a6:f3:61:
ed:49:9a:51:fc:2c:15:19:f1:56:90:8c:df:e0:bf:27:5b:59:
68:3e:85:59:9e:fb:5e:2e:04:c6:82:a7:18:3d:aa:49:73:54:
ee:b9:e2:3a:4d:b9:9e:69:92:c3:74:b4:7c:ab:cf:fc:c2:58:
21:c3:5f:89:3c:22:ba:f9:2d:f7:38:e8:91:bd:d9:8a:fc:af:
61:fd:f4:bf:a4:18:61:cd:db:99:89:25:49:7e:63:6c:7b:c5:
d7:60:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:51 2025 by rpki-client