Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer (raw, json)
Hash identifier: hrxGK8XGYya2k4ZeEh6CgCQu4E5xiZebRUeEPvYL19I=
Subject key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A63
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 15:10:57 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 139.189.0.0/16
IP: 139.200.0.0/13
IP: 140.75.0.0/16
IP: 140.224.0.0/16
IP: 140.237.0.0/16
IP: 140.240.0.0/16
IP: 140.243.0.0/16
IP: 140.246.0.0/16
IP: 140.249.0.0 -- 140.250.255.255
IP: 140.255.0.0/16
IP: 144.0.0.0/16
IP: 144.7.0.0/16
IP: 144.12.0.0/16
IP: 144.52.0.0/16
IP: 144.123.0.0/16
IP: 144.255.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27235 (0x6a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 15:10:57 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:2d:33:1c:8e:9a:6c:a7:33:e8:7c:74:89:
c8:48:7e:ab:ff:3d:8f:0d:47:86:7c:67:36:26:44:
35:fd:89:fa:f9:96:0f:2f:9d:c6:14:c5:a3:3c:83:
3d:22:0c:07:d3:6d:0a:b4:47:e8:39:64:23:5a:f1:
7c:9f:4f:e3:4c:7b:3a:48:cc:23:0b:4a:c4:02:86:
b9:dc:d1:84:7f:e6:4c:87:6e:b4:83:42:7c:e5:c7:
29:b0:f2:9b:5b:18:c8:f1:51:28:87:22:6d:4c:10:
49:bc:f4:67:7f:a9:24:fd:2f:c5:36:61:cd:b7:fb:
13:2a:4b:a3:0a:29:92:83:a5:65:4e:91:00:cb:6e:
90:13:05:42:f7:fb:07:22:2a:79:8f:b1:b3:5b:7a:
21:1e:38:37:44:34:ce:77:23:51:86:46:75:6a:13:
77:65:2e:0d:56:98:48:34:27:a9:ae:13:4d:0a:1d:
2f:3f:fa:78:5c:05:c5:d8:ef:28:9d:8f:fb:c3:d7:
ff:74:d2:f3:ea:3d:bf:72:3e:49:bf:e5:14:9b:e9:
08:08:aa:5f:46:5a:6c:04:13:8b:f8:6d:81:9d:2d:
84:b9:ef:44:2b:d2:03:44:62:85:77:96:27:84:9c:
78:99:01:3c:21:e8:79:0d:43:27:2f:30:4b:e7:4f:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.189.0.0/16
139.200.0.0/13
140.75.0.0/16
140.224.0.0/16
140.237.0.0/16
140.240.0.0/16
140.243.0.0/16
140.246.0.0/16
140.249.0.0-140.250.255.255
140.255.0.0/16
144.0.0.0/16
144.7.0.0/16
144.12.0.0/16
144.52.0.0/16
144.123.0.0/16
144.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:9b:76:00:34:09:07:69:88:a3:35:32:36:c1:69:1f:7f:12:
6f:ce:05:77:e6:41:af:bc:00:43:f9:a7:a1:23:6f:d7:bd:f0:
33:3c:2c:e2:19:0b:b3:3c:14:d6:7e:88:de:65:84:c4:ba:b5:
4c:2f:a6:d8:ba:00:d7:13:69:5b:df:5a:41:d1:4c:b9:1f:6e:
0c:74:3d:40:5b:29:63:66:c1:6e:d5:1b:fa:af:3f:f1:72:c9:
7e:10:f1:2d:c4:df:43:73:7c:24:5b:0f:1f:a8:58:06:29:79:
6f:61:95:4a:2c:e8:dd:b0:2f:73:3b:d2:5a:db:38:84:a4:17:
02:d9:e6:77:df:70:38:eb:93:d1:c4:d0:63:13:2e:c3:6b:47:
dc:68:6d:fd:42:6d:4a:59:8d:03:81:49:6b:0d:36:ee:88:93:
12:39:81:00:3e:7e:aa:32:58:52:72:9b:0e:d1:75:31:75:2d:
32:15:7f:7a:39:18:85:9a:2c:b1:57:db:e6:98:bc:8c:c3:cb:
a5:fa:18:b6:ce:31:e3:74:34:35:3d:42:9e:9b:69:07:c0:ba:
04:14:42:3d:a9:12:7f:2d:de:4b:66:d6:c0:c0:00:7e:e1:b8:
02:25:9c:5f:ed:56:ac:fc:c3:6d:85:db:1b:fd:33:0f:c6:6b:
49:eb:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:23:26 2025 by rpki-client