Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer (raw, json)
Hash identifier: yICxXwb58lNjWlcHAY1GLn0Ed3i/472eOrTvbmBZSWs=
Subject key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A487
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 13:34:50 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 9408
IP: 203.0.156.0/22
IP: 2001:df1:3000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173191 (0x2a487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 16 13:34:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:f3:dd:a7:6f:9f:c6:96:65:fb:60:28:67:
9b:89:c1:9a:db:ed:dc:20:c1:82:40:11:ca:b7:44:
5c:4c:6d:00:9c:b9:56:f1:f2:e0:f9:1d:c5:77:8c:
34:07:4b:3b:83:39:ee:29:4a:fe:2c:da:c9:65:c2:
c2:d4:1c:e6:1c:ed:d8:39:f2:93:67:e5:40:db:80:
a5:8b:02:6e:08:25:2a:44:8a:ee:51:1f:b8:46:5d:
f7:aa:10:b0:f6:0c:e7:61:44:7a:be:3a:bf:36:d1:
86:60:35:10:25:6c:24:3f:77:c2:aa:04:7a:7e:2f:
3e:6f:0b:a5:ed:ad:0d:e7:62:36:7d:97:1a:41:1b:
9f:f4:f2:07:d2:61:4a:7d:47:9e:36:ea:63:9e:ed:
74:6a:1d:d0:97:8e:67:86:a4:45:7b:fe:b8:16:5a:
f4:66:e6:6d:e5:7b:83:e5:c0:e2:fe:ce:05:39:83:
4f:56:f3:2a:bf:e4:aa:a0:65:11:42:d2:dc:4a:ab:
7c:af:1a:16:c2:ad:cf:c2:89:e4:81:d0:a1:30:c3:
d8:cb:c2:1d:14:fe:86:87:bb:6a:70:ba:6e:dc:07:
f1:a2:83:3f:6c:c2:88:b9:be:64:50:7f:84:8a:86:
c2:2a:73:f7:30:c1:08:6c:dd:f7:3f:77:77:9e:dd:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9408
sbgp-ipAddrBlock: critical
IPv4:
203.0.156.0/22
IPv6:
2001:df1:3000::/48
Signature Algorithm: sha256WithRSAEncryption
6a:67:f0:70:24:0a:c7:50:f6:74:b4:62:26:17:48:a0:c9:8d:
5b:28:6c:87:b0:8f:df:42:f3:46:d8:e7:e1:4d:63:95:b2:ea:
5a:1e:f8:56:d1:ff:e6:63:0d:3c:19:fc:d4:29:d8:2e:c5:8f:
41:3f:15:55:01:75:58:7b:4e:52:c0:6a:bd:56:81:0c:6b:47:
d9:af:e2:45:8d:ac:2b:be:52:42:d4:61:77:bd:73:13:96:b0:
24:ba:91:e0:2e:36:1f:7d:31:c4:ce:b8:ce:db:17:c9:15:92:
47:24:3e:76:b3:b4:1f:c4:16:9d:9f:70:d5:b3:ea:e0:a8:90:
a8:68:4c:fd:3e:8b:10:8e:0a:f6:14:9e:dc:0c:83:d0:38:fe:
8b:b9:70:2e:c1:9d:c5:f0:f4:11:21:1b:39:68:81:2a:7c:ab:
3a:95:e1:be:8c:e9:b7:95:cf:5a:f3:51:12:6f:86:5f:5e:71:
b6:c4:66:8e:8c:67:04:12:31:b9:11:7a:23:3c:a5:b5:3c:28:
83:1c:a9:85:46:f7:bf:1a:d0:b5:dd:5c:71:7e:0e:84:8a:b7:
38:48:70:82:0d:5b:ba:22:e5:b6:c4:3f:b3:bb:94:46:f9:50:
57:65:e3:ee:85:c3:1c:26:d9:2e:3e:93:e4:fd:6b:98:fd:85:
60:78:14:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:51 2026 by rpki-client