Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer (raw, json)
Hash identifier: G3R7m1fm7kqgsOD0X6hbG2A3E/LzZ7s3wKYsIzqX+So=
Subject key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 818D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Aug 2026 16:59:11 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 137.147.0.0/16
IP: 138.130.0.0/16
IP: 138.217.0.0/16
IP: 139.130.0.0/16
IP: 139.134.0.0/16
IP: 139.168.0.0/16
IP: 143.238.0.0/16
IP: 144.130.0.0 -- 144.140.255.255
IP: 147.10.0.0/16
IP: 147.69.0.0/16
IP: 149.135.0.0/16
IP: 149.167.0.0/16
IP: 155.143.0.0/16
IP: 165.228.0.0/16
IP: 192.67.84.0/24
IP: 192.70.219.0/24
IP: 192.73.66.0/24
IP: 192.74.139.0 -- 192.74.208.255
IP: 192.82.143.0/24
IP: 192.111.105.0/24
IP: 192.131.27.0 -- 192.131.30.255
IP: 192.148.116.0 -- 192.148.165.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33165 (0x818d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 30 16:59:11 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:1d:aa:6f:69:f1:ab:bc:b0:97:d8:b3:e6:
1f:44:a2:cd:57:33:8c:d9:00:1a:ea:2b:03:26:9c:
a5:37:e6:e6:a3:09:d9:6a:bb:dc:6d:58:4c:b2:9e:
31:ec:de:88:19:6e:19:fa:dd:3d:9f:68:45:f7:9f:
fb:f8:9d:30:e4:13:0b:59:cb:5c:c5:a9:5f:94:74:
1e:cc:6a:0f:96:bd:c3:ff:19:f2:70:3c:5b:4d:d9:
9e:cf:0a:6f:5a:e8:84:64:f5:eb:2c:9f:60:ae:e0:
93:15:12:39:b5:ef:c8:ab:f2:2e:8f:61:5f:4c:0d:
d9:c4:af:89:ff:ac:fe:6f:3c:59:4a:a3:66:9a:9f:
6b:39:33:70:93:ac:ad:73:00:f5:15:1a:43:65:9a:
2e:7b:da:d7:ad:9a:f1:b2:7e:69:51:5f:44:3c:96:
2b:7d:d8:8e:fa:37:a0:a4:ea:1a:e7:6e:20:4e:e8:
98:43:74:6a:1f:62:9c:9f:3a:74:bd:db:5f:f1:4d:
6d:bb:d9:59:6f:41:4f:06:ae:be:f8:15:8b:83:8f:
28:04:e1:01:65:81:59:77:ab:48:9c:74:ff:25:52:
a6:3b:d0:cb:c3:fa:61:7f:bb:a9:5f:32:db:e3:a0:
c9:ce:6d:2c:0b:4c:bd:8b:52:54:5c:bf:9d:d3:66:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.147.0.0/16
138.130.0.0/16
138.217.0.0/16
139.130.0.0/16
139.134.0.0/16
139.168.0.0/16
143.238.0.0/16
144.130.0.0-144.140.255.255
147.10.0.0/16
147.69.0.0/16
149.135.0.0/16
149.167.0.0/16
155.143.0.0/16
165.228.0.0/16
192.67.84.0/24
192.70.219.0/24
192.73.66.0/24
192.74.139.0-192.74.208.255
192.82.143.0/24
192.111.105.0/24
192.131.27.0-192.131.30.255
192.148.116.0-192.148.165.255
Signature Algorithm: sha256WithRSAEncryption
4b:8c:89:9c:d0:a6:e2:00:38:46:27:b0:3e:fa:d6:aa:81:06:
a8:be:ee:8f:49:08:14:3f:30:d4:ed:09:65:97:38:1a:1e:74:
a2:82:6d:30:9e:d8:23:c4:51:25:c5:f7:10:5d:80:63:69:de:
3c:d0:67:eb:7f:a9:36:f5:ed:55:ae:17:6d:fe:e1:c9:01:ff:
71:63:55:20:c0:b8:24:41:40:b4:99:e8:6e:a3:e8:66:ad:b1:
23:b0:b5:cd:db:9e:ed:84:d7:bd:b6:c6:47:b7:a8:6a:2a:d4:
6f:64:ae:8a:e7:b7:00:28:63:6b:9b:11:a7:12:d6:a0:5d:9f:
ea:de:67:62:20:24:56:f9:01:b9:c8:9c:3e:e3:79:83:cc:32:
00:d5:6e:0c:9e:5f:7e:45:df:5c:ce:61:20:99:f3:ed:f6:fb:
ad:ca:14:21:2b:0f:62:7c:bd:f8:c3:bb:8a:f8:80:e2:64:96:
56:f8:da:f7:20:ba:95:a1:82:e4:b1:13:53:4b:77:58:ca:f7:
b5:9f:2f:4d:e6:35:7c:30:e7:c0:f7:e3:83:b9:26:3d:9c:5d:
95:b0:36:fb:4d:01:cd:32:0f:52:4b:57:14:21:70:2c:e3:5d:
a8:de:c3:5f:94:f8:1a:52:6b:09:4a:ef:ed:97:b5:b9:fa:e4:
1c:1c:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:33:48 2026 by rpki-client