Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
File: UAxgp_acBL6E_PPGVyPAeXDloSg.cer (raw, json)
Hash identifier: wMxZELNuLw1zxxSaiefZ8RxebgUeLB3DK/mKtyCR9aI=
Subject key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A24E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 13:56:31 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 134829
IP: 103.135.104.0/23
IP: 2404:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172622 (0x2a24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 13:56:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:e9:05:bc:46:36:ec:f8:95:c5:90:16:ef:
51:4e:a1:a4:b4:b9:9a:7b:57:d0:d6:b3:ee:f8:d5:
c7:e7:d0:d1:a5:51:18:62:d3:35:41:a1:90:a4:71:
5c:91:9e:32:b2:ef:dc:59:6b:e0:1a:d3:28:82:44:
86:d2:03:c5:7a:d6:52:33:33:11:1c:67:57:84:24:
c1:c8:2a:ef:2f:a8:8d:7e:c5:bd:66:ed:df:a6:27:
e2:5c:2c:99:bc:7e:68:d2:04:d6:68:a5:43:ad:bd:
55:ae:91:c7:6a:f3:1b:63:45:86:31:e2:16:d1:6a:
9b:86:44:56:79:0e:d2:b3:56:30:c7:e9:c5:85:fc:
be:bf:19:2f:8f:d6:f0:1e:5f:7e:f7:a7:1e:e0:f9:
7b:f9:75:e7:76:77:e0:ac:6f:88:62:da:9e:82:7a:
6f:d4:39:5f:70:e0:01:db:38:68:87:12:66:ae:31:
7b:cc:fd:64:9e:c2:bc:5b:d8:b8:1d:00:4f:7f:7a:
35:79:8e:72:ee:43:4d:82:0a:24:6b:32:ac:e0:a6:
e5:eb:96:08:fa:b6:23:22:ef:35:6c:69:b3:04:be:
7f:bc:78:18:88:64:9d:e5:8b:3e:59:d7:c4:bc:e6:
13:cb:a2:db:54:7e:4a:82:2f:8f:5c:55:32:e7:f7:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134829
sbgp-ipAddrBlock: critical
IPv4:
103.135.104.0/23
IPv6:
2404:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
9f:39:7d:c0:f8:19:0a:75:60:e8:1a:13:50:34:5b:b9:2c:46:
c5:be:9b:6b:60:25:55:4f:2b:8c:24:fd:2e:eb:01:fb:5d:57:
ec:64:be:41:d9:79:f2:cd:28:5a:8b:48:b9:72:cf:50:c4:ae:
4a:8b:61:08:0c:ce:2d:c6:ea:1b:9e:94:d2:67:71:b5:a0:9e:
07:9f:6b:da:a6:d2:15:e4:b5:d4:8f:d9:1f:0d:6e:70:3d:3e:
8d:19:c1:5c:8a:8b:7f:d1:eb:c7:95:04:73:92:b1:d6:81:50:
a9:73:66:db:4c:a1:70:f2:cb:87:47:82:2b:22:9e:02:b9:f5:
25:15:c9:99:1d:64:7a:20:a9:b5:72:6d:61:7a:42:fe:0d:53:
4b:40:ce:d7:55:6a:9a:8e:17:dc:37:1f:e7:e3:a5:15:a7:50:
b8:6c:d0:1c:63:83:17:54:8a:a7:d6:31:4a:cc:8e:57:5c:c9:
db:72:2a:a0:7e:6d:a0:8d:5d:82:87:a1:18:ee:b5:e5:77:d4:
44:7e:83:fd:d7:3d:65:6d:1e:5c:d6:98:83:d5:78:fc:70:e2:
bf:13:86:aa:01:19:8c:39:34:83:09:d4:30:86:70:5c:da:c1:
96:90:60:7d:e9:4c:88:9d:eb:b0:b8:22:f6:5b:14:ab:e1:03:
23:47:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:18:53 2026 by rpki-client