
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
File: UgupTND7nnwUDfvAzFi5PPVMIvM.cer (raw, json)
Hash identifier: FADFkhDme1RgqhqvntRGM0Z2Y2TlJiCGwD2mxw5CcPc=
Subject key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A1C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Aug 2025 20:59:02 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27164 (0x6a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 21 20:59:02 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:2a:18:c3:c6:8a:4f:25:fd:39:e3:9e:24:
d8:cb:fd:41:05:32:ea:bf:ad:16:7e:c6:00:0d:dd:
b9:36:80:49:67:9f:1d:d8:39:82:16:cb:6f:f8:1d:
3b:e3:45:3a:06:87:99:4a:96:33:f4:29:13:fe:79:
0b:ff:c3:17:e6:91:96:64:e2:e9:78:9d:7c:64:f2:
56:8c:c7:9b:57:cb:8a:e5:cb:b1:cd:76:50:4c:9c:
5d:f5:ea:b9:06:95:d4:c1:ec:66:30:2c:5e:a5:05:
98:64:2f:66:33:6b:a5:91:de:35:71:15:7c:01:a7:
61:e0:56:53:ce:0c:bc:df:43:d3:b1:1e:66:49:8b:
09:d3:92:01:9d:c1:f3:cd:5f:6b:38:2a:e9:c1:da:
6c:af:a1:f8:8a:68:97:bc:c1:f1:cb:b2:d9:ab:83:
36:bf:88:f5:fc:b5:60:ab:64:06:5e:85:89:c2:89:
51:5a:a7:a1:9e:30:d2:66:cd:ec:c6:7e:aa:d0:09:
52:e6:98:ce:7d:ed:d8:72:6f:e2:c6:0a:e3:a9:ad:
d1:cb:8b:5a:a5:b2:c5:38:b3:34:f1:0a:92:59:86:
45:55:8e:c1:28:a7:00:30:7e:8e:d0:f5:fe:b2:27:
3a:f4:a4:0f:f2:75:5d:d3:d6:75:d4:1d:9a:bd:2b:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.26.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:16:ee:69:11:6e:af:11:02:d4:eb:a6:3c:70:4a:09:21:45:
6c:a4:f8:72:af:ae:46:02:26:af:37:52:5b:0a:82:d8:00:f2:
12:c1:4c:1e:b4:d6:a7:ef:26:4a:10:64:40:c5:f3:10:e2:be:
c9:ed:3e:79:ef:9e:16:2e:7a:75:c3:62:4f:6d:7c:d3:74:19:
7c:63:b5:b7:ad:e1:d1:86:89:70:b2:bb:00:69:fb:c5:01:7d:
a8:f5:5e:57:2b:d1:81:b0:32:bb:74:ff:69:4d:f8:61:4c:9a:
89:04:d3:de:e0:46:46:61:12:b8:6c:5c:bb:ae:3d:07:73:8f:
ab:6b:0b:6a:df:9d:94:b6:e4:fb:f4:f3:d8:0f:f8:67:22:c8:
e0:8a:94:6a:5b:a9:50:43:39:91:6c:33:9f:44:06:1a:b2:2d:
16:b3:3f:9a:bc:63:ba:69:4f:c1:6f:05:1c:e7:67:3c:fa:21:
1f:18:09:c9:44:80:84:51:d1:5e:a5:ad:9a:fd:e1:57:af:b7:
1b:bd:3d:dd:db:7e:21:e1:4c:68:0e:e2:d9:9c:55:22:84:2d:
fc:f2:2c:11:bd:cc:a8:07:31:ad:f1:49:83:d4:c5:a4:2c:63:
dd:2f:78:d5:48:1d:82:12:1c:b9:a1:28:a5:bf:06:85:ab:c2:
e6:0b:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:59 2025 by rpki-client