Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer (raw, json)
Hash identifier: SyC0LtW+IUhDYaxYafy796XxR1MSNBx4cvY/zf3ccnA=
Subject key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82E5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 12:58:39 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 139.189.0.0/16
IP: 139.200.0.0/13
IP: 140.75.0.0/16
IP: 140.224.0.0/16
IP: 140.237.0.0/16
IP: 140.240.0.0/16
IP: 140.243.0.0/16
IP: 140.246.0.0/16
IP: 140.249.0.0 -- 140.250.255.255
IP: 140.255.0.0/16
IP: 144.0.0.0/16
IP: 144.7.0.0/16
IP: 144.12.0.0/16
IP: 144.52.0.0/16
IP: 144.123.0.0/16
IP: 144.255.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33509 (0x82e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 30 12:58:39 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:2d:33:1c:8e:9a:6c:a7:33:e8:7c:74:89:
c8:48:7e:ab:ff:3d:8f:0d:47:86:7c:67:36:26:44:
35:fd:89:fa:f9:96:0f:2f:9d:c6:14:c5:a3:3c:83:
3d:22:0c:07:d3:6d:0a:b4:47:e8:39:64:23:5a:f1:
7c:9f:4f:e3:4c:7b:3a:48:cc:23:0b:4a:c4:02:86:
b9:dc:d1:84:7f:e6:4c:87:6e:b4:83:42:7c:e5:c7:
29:b0:f2:9b:5b:18:c8:f1:51:28:87:22:6d:4c:10:
49:bc:f4:67:7f:a9:24:fd:2f:c5:36:61:cd:b7:fb:
13:2a:4b:a3:0a:29:92:83:a5:65:4e:91:00:cb:6e:
90:13:05:42:f7:fb:07:22:2a:79:8f:b1:b3:5b:7a:
21:1e:38:37:44:34:ce:77:23:51:86:46:75:6a:13:
77:65:2e:0d:56:98:48:34:27:a9:ae:13:4d:0a:1d:
2f:3f:fa:78:5c:05:c5:d8:ef:28:9d:8f:fb:c3:d7:
ff:74:d2:f3:ea:3d:bf:72:3e:49:bf:e5:14:9b:e9:
08:08:aa:5f:46:5a:6c:04:13:8b:f8:6d:81:9d:2d:
84:b9:ef:44:2b:d2:03:44:62:85:77:96:27:84:9c:
78:99:01:3c:21:e8:79:0d:43:27:2f:30:4b:e7:4f:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.189.0.0/16
139.200.0.0/13
140.75.0.0/16
140.224.0.0/16
140.237.0.0/16
140.240.0.0/16
140.243.0.0/16
140.246.0.0/16
140.249.0.0-140.250.255.255
140.255.0.0/16
144.0.0.0/16
144.7.0.0/16
144.12.0.0/16
144.52.0.0/16
144.123.0.0/16
144.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:6e:b1:42:d5:82:fa:6a:48:64:bd:89:9b:9e:08:da:6d:c4:
d9:00:bd:22:b1:d2:40:78:30:7b:b0:4c:da:50:25:a2:07:07:
2a:cc:15:8e:7c:1b:38:44:c5:e6:9b:cb:e1:cb:32:09:cb:b5:
22:21:b1:33:f4:9b:0a:c3:0d:5f:3d:28:3d:07:82:ee:03:5c:
33:c1:0a:a5:b8:8f:a1:b2:fe:b9:7e:d9:6e:e3:b3:47:24:28:
6c:58:2e:77:57:7a:ad:c5:c3:c2:13:57:d9:c9:ac:41:b7:72:
6d:f6:6b:6d:33:38:5a:b8:c5:0a:7f:77:fb:85:1a:8a:3f:f5:
05:ad:19:08:be:bf:06:0a:c5:ec:2e:e5:4e:9c:69:0b:4b:e7:
83:67:20:48:2d:74:9d:f3:f5:7c:3d:8e:b3:19:f8:ea:18:ff:
14:64:f9:cf:8f:65:5b:a6:ec:83:76:29:8d:b3:39:ef:86:f7:
43:7e:45:58:0b:36:b6:d4:d4:dd:5f:c5:0e:c5:cd:d1:4b:a2:
8c:ef:e9:02:f7:48:e5:62:a0:65:b7:d5:e8:59:58:c7:45:05:
a7:a9:d4:52:af:47:9d:a3:85:43:a3:5e:ba:04:09:d4:8a:1d:
e2:85:82:c4:fe:6f:65:fe:44:08:6c:a2:ab:52:73:d5:0c:fd:
bb:23:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:48 2026 by rpki-client