Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
File: UqAK42gJYToMmRW4LS7dewR_BBY.cer (raw, json)
Hash identifier: znkk46w7LZo3btKEz1JP7VZsdO1y32+7LYE1FA7e6J0=
Subject key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 10:35:43 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 134738
IP: 2001:df6:38c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159082 (0x26d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 10:35:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:ea:8f:a7:52:1e:ad:44:bf:45:39:91:07:
a1:5f:b0:d2:f2:cd:38:eb:a2:fd:a3:be:90:6f:4c:
75:89:41:54:86:ba:5f:3b:45:b8:a8:2d:d7:ab:7e:
f6:bf:1a:d9:dc:b2:5e:a6:24:38:9e:98:20:a5:99:
da:46:a0:86:57:5e:0c:21:4d:ed:d9:7a:4e:cd:8e:
29:0d:14:37:b7:9b:bb:49:0b:90:1d:ba:62:76:1b:
5e:ca:23:9d:97:99:8a:bc:8e:c7:57:65:29:9c:fa:
86:ef:f2:70:80:c3:24:cf:6b:48:01:50:a2:48:36:
8b:29:49:4c:ea:05:af:01:90:ae:29:d7:96:c0:4b:
85:9c:8e:14:af:b4:51:6c:11:29:6d:15:73:ec:56:
0c:69:ef:df:dc:84:f2:21:e4:0f:46:c9:8e:d1:b2:
13:11:4b:fe:91:d0:7a:fa:6f:09:cb:2c:c1:54:30:
90:b4:20:95:32:84:c0:d5:6d:b9:2f:87:12:39:a6:
96:3f:d6:cf:ae:f0:d8:ca:3a:6f:ac:22:5e:03:29:
12:fe:2e:8e:79:cf:52:6d:4e:74:a9:46:4c:1f:ed:
24:c1:16:8f:6f:07:12:74:72:bd:86:0c:78:f0:3d:
f6:c0:c3:f0:ea:35:4a:b1:db:13:83:cf:8a:4c:04:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134738
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:38c0::/48
Signature Algorithm: sha256WithRSAEncryption
d0:04:83:50:32:cf:1b:6f:12:1f:cc:da:a3:d9:75:94:77:85:
bd:d5:2a:50:31:d9:37:44:37:4c:81:30:bd:14:32:e6:83:66:
15:3e:b6:f2:3f:f9:c7:c3:10:9a:32:26:29:b2:48:23:da:ec:
a0:7b:b1:76:c8:57:32:19:4e:8f:c8:97:c6:b6:28:2b:bd:17:
b1:c3:20:86:b0:e6:e4:27:d1:48:6b:64:34:40:66:35:04:22:
da:c1:24:d8:61:3a:39:12:65:b1:fd:01:1a:9d:85:ef:36:9d:
39:2b:45:cb:76:08:8a:48:7f:f4:14:a9:13:76:88:9c:6c:18:
c7:df:ac:4d:3a:68:ca:48:bb:af:12:a0:18:25:35:38:ab:63:
49:60:85:ec:3a:e7:e4:bc:2b:f0:1d:eb:96:0f:74:1c:60:62:
96:95:40:f1:7a:4a:3c:1b:60:7c:b4:d0:1a:56:ea:cf:db:fd:
31:78:f9:ff:ac:b3:dd:f6:68:b6:45:7f:81:75:38:d3:07:7f:
4b:69:9b:7b:5b:ae:47:0d:d5:27:24:51:cd:f6:e7:38:77:db:
04:17:43:d1:57:6c:11:fb:a5:3f:6f:48:33:97:4b:30:eb:4b:
e0:f8:3e:98:4b:a4:e5:b5:70:b0:22:a5:cf:3e:32:97:1d:cb:
1e:40:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client