Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
File: WxEHJBui4_SARaniY3dkk8r3XwU.cer (raw, json)
Hash identifier: 1J4fz/my3e+ekZXpOnNU7GsoC0d3ammBpwKkOWr6+iQ=
Subject key identifier: 5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 11:17:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 144.36.70.0 -- 144.36.73.255
IP: 144.36.104.0/24
IP: 144.36.128.0/23
IP: 144.36.134.0/23
IP: 144.36.140.0/23
IP: 144.36.144.0/23
IP: 144.36.148.0/23
IP: 144.36.176.0/24
IP: 144.36.178.0/24
IP: 144.36.182.0 -- 144.36.185.255
IP: 144.36.188.0/23
IP: 144.36.206.0/23
IP: 144.36.210.0/23
IP: 144.36.214.0 -- 144.36.217.255
IP: 144.36.220.0 -- 144.36.236.255
IP: 144.36.244.0/23
IP: 144.36.248.0/22
IP: 144.36.254.0/23
IP: 170.248.0.0/23
IP: 170.248.12.0/23
IP: 170.248.42.0/23
IP: 170.248.46.0/23
IP: 170.248.138.0/23
IP: 170.248.160.0 -- 170.248.171.255
IP: 170.248.190.0/23
IP: 170.251.10.0/23
IP: 170.251.20.0/23
IP: 170.251.40.0/21
IP: 170.251.60.0/23
IP: 170.251.90.0/23
IP: 170.251.110.0/23
IP: 170.251.142.0/23
IP: 170.251.149.0 -- 170.251.151.255
IP: 170.251.154.0 -- 170.251.157.255
IP: 170.251.170.0/23
IP: 170.251.174.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33454 (0x82ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 25 11:17:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9165D75, serialNumber=5B1107241BA2E3F48045A9E263776493CAF75F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:cf:c5:5e:7d:fa:02:de:8e:38:89:a2:4a:
ca:5f:c1:13:8d:cf:e2:bd:6a:5a:80:3d:08:5b:03:
a0:b7:cb:24:b3:db:c0:d7:d0:77:6d:77:50:a1:ea:
94:5d:67:33:5b:c6:a5:cf:d0:35:90:d9:a9:05:73:
54:c5:b2:f2:65:a8:48:f5:56:0b:52:97:11:d5:73:
b7:e4:06:c2:c3:aa:75:b9:21:9a:a4:f5:f2:e6:0c:
2c:98:aa:32:34:63:b4:55:60:94:7a:32:bd:b8:70:
65:38:89:89:ea:cf:fd:11:af:74:4b:35:44:f4:5c:
05:35:2b:58:66:de:68:93:88:70:fd:2e:37:ae:16:
ae:d6:3c:7e:ca:f0:06:42:e7:50:00:87:47:5f:ea:
48:2e:9e:c1:ae:af:bf:7d:50:ea:83:84:f9:1d:c6:
22:f8:64:55:48:85:1e:e3:1d:e4:c7:20:ed:02:4b:
02:8d:5c:93:1c:30:db:0b:33:04:7b:6e:e7:4f:44:
b7:4b:99:52:ed:83:9a:c9:08:c3:7a:6a:27:89:0b:
81:db:8c:b1:d0:61:ea:d6:01:f7:6d:18:98:f6:17:
5f:e7:bf:5e:4e:36:a4:38:39:10:b9:f4:55:0c:bb:
6f:8f:a3:24:31:82:2c:61:79:d6:f7:34:af:09:91:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.36.70.0-144.36.73.255
144.36.104.0/24
144.36.128.0/23
144.36.134.0/23
144.36.140.0/23
144.36.144.0/23
144.36.148.0/23
144.36.176.0/24
144.36.178.0/24
144.36.182.0-144.36.185.255
144.36.188.0/23
144.36.206.0/23
144.36.210.0/23
144.36.214.0-144.36.217.255
144.36.220.0-144.36.236.255
144.36.244.0/23
144.36.248.0/22
144.36.254.0/23
170.248.0.0/23
170.248.12.0/23
170.248.42.0/23
170.248.46.0/23
170.248.138.0/23
170.248.160.0-170.248.171.255
170.248.190.0/23
170.251.10.0/23
170.251.20.0/23
170.251.40.0/21
170.251.60.0/23
170.251.90.0/23
170.251.110.0/23
170.251.142.0/23
170.251.149.0-170.251.151.255
170.251.154.0-170.251.157.255
170.251.170.0/23
170.251.174.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:3e:d2:cb:b8:3c:d7:5e:7b:60:c6:1b:72:ec:cc:38:0c:66:
53:04:b5:87:e2:b5:52:ae:20:00:d6:9b:f5:b8:bc:8e:f0:2d:
4a:a7:29:14:74:f5:ff:2b:21:05:70:45:16:32:45:17:61:ba:
e1:e5:5d:21:3d:f1:79:c2:9c:14:7a:c3:cd:ab:32:58:df:7c:
7c:56:b2:ae:94:eb:e1:a1:89:95:fe:c4:19:a0:9c:7d:0f:91:
3b:4a:e9:ed:bf:cf:d5:ca:42:76:58:91:1f:8a:61:c7:b4:c0:
e7:9a:66:96:bd:ae:83:c0:6c:f7:8e:55:aa:02:29:59:4e:90:
c0:7c:ae:40:78:63:4a:62:96:f2:c6:d6:26:74:e2:f0:5e:d7:
ec:f6:0e:93:62:bf:bf:3f:3f:de:b4:e2:3c:20:24:c0:7c:93:
c2:7e:43:a4:a4:fc:ef:cf:e4:2e:3b:28:3b:84:a4:07:b3:43:
e7:8c:79:6b:1a:06:ca:fe:3f:93:cf:d7:42:8f:3a:1f:40:bf:
48:b0:83:70:49:ce:4f:83:9c:11:57:e9:7b:33:80:1e:74:3c:
06:12:d6:24:22:7d:c8:92:8b:f7:b9:04:0c:15:ce:5b:b7:54:
ef:b8:65:67:b4:79:cb:21:06:78:13:61:cd:c4:92:03:09:13:
f3:9f:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:20 2026 by rpki-client