Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
File: ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer (raw, json)
Hash identifier: nIdbPW4eSTdxN2oMJ0ye8BeDX/SKJW9GehxWwPTaxyI=
Subject key identifier: B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F3C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jul 2026 06:55:43 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.97.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32572 (0x7f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 23 06:55:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91D0468, serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:dd:47:aa:7b:43:f5:9a:cd:fa:50:55:5c:
1f:89:fe:de:9d:e3:a8:08:4a:5e:1a:4f:13:89:91:
df:9a:ab:82:3b:5c:f7:7d:df:8a:fc:ef:06:e0:2f:
3e:bf:aa:a4:7e:57:2e:03:12:d9:0e:e6:47:4c:d9:
f0:8a:aa:3b:ba:f1:2c:0c:42:87:8b:b6:ec:bc:16:
c8:f6:40:73:38:90:f3:86:55:fd:91:7c:24:b4:54:
d1:d4:a4:f9:6d:b2:1c:10:3e:13:42:49:db:71:9d:
5e:d4:59:b1:b7:e9:f3:74:bd:36:78:de:72:e6:78:
d4:e2:f5:27:5b:e1:25:b6:ac:75:6f:38:47:02:5a:
88:83:3c:7e:43:41:10:35:87:fb:a3:e4:94:25:d1:
28:c4:85:5a:b8:86:e9:00:bb:a0:30:f8:fd:df:a1:
a3:3e:c0:85:6b:b4:3f:62:6a:e5:10:0a:f3:00:e6:
10:42:c9:ba:43:f3:fc:95:12:e3:84:9f:e8:9a:8a:
38:ec:38:0d:77:b1:2e:d1:36:09:f1:f8:69:fe:3c:
e1:8a:23:19:93:6a:d0:88:b3:cf:03:e8:82:86:7a:
b9:b9:6d:ea:6c:85:22:d5:b7:81:e0:ed:33:b8:cb:
d5:b0:33:6c:14:ee:85:81:2a:f0:3e:06:bf:ac:75:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.97.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f6:ad:8c:38:26:a1:20:0d:21:9b:14:3b:9b:85:43:be:79:
76:7b:cc:a9:69:5b:02:3d:ae:5d:d7:76:95:b4:e2:72:3d:7f:
5f:d3:e9:c7:06:4e:e4:9d:3c:19:36:05:8a:e9:39:ac:88:4e:
09:fb:3b:6d:88:76:98:1d:0d:00:f3:77:13:4b:01:9a:24:15:
37:66:63:6b:2f:d5:df:d2:10:10:20:25:01:d5:97:bb:65:10:
66:57:d7:e7:78:56:9e:ba:e1:d2:64:a2:30:a5:fd:00:32:c7:
3b:ca:51:dd:0d:df:b8:71:a8:6c:dd:de:12:64:0b:7c:dc:bf:
c7:c9:9d:76:9c:a8:ad:8f:ac:9e:b0:6a:ee:11:fc:fc:9e:2f:
ba:ae:e9:c7:c5:b1:90:36:0e:98:d8:0a:34:1a:89:8c:c3:bb:
b1:ae:75:21:a4:7f:4f:86:69:71:e9:ab:4f:ef:cb:91:d9:a5:
84:28:3a:a2:2c:10:eb:63:f8:0a:fe:cb:32:b5:f1:03:bf:be:
97:f8:ed:85:f8:cd:e1:73:65:5f:58:d2:26:53:aa:84:28:d3:
f3:ec:cc:87:73:ec:b3:70:fb:b8:93:bf:d3:bf:c4:0d:53:49:
14:99:86:bb:07:be:a1:11:03:61:a9:19:5f:46:27:b7:2d:cf:
d0:e7:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:35 2026 by rpki-client