Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (raw, json)
Hash identifier: uNRKq2axXLTQuVR7lf32LlbyWMSEZO8QKlizXqCVA/8=
Subject key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8057
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Aug 2026 12:47:35 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 128.134.0.0/16
IP: 129.254.0.0/16
IP: 134.75.0.0/16
IP: 137.68.0.0/16
IP: 138.252.134.0/23
IP: 139.150.0.0/16
IP: 143.248.0.0/16
IP: 147.6.0.0/16
IP: 147.43.0.0/16
IP: 147.46.0.0/15
IP: 152.99.0.0/16
IP: 152.149.0.0/16
IP: 155.230.0.0/16
IP: 156.147.0.0/16
IP: 157.66.64.0/23
IP: 157.197.0.0/16
IP: 158.44.0.0/16
IP: 160.30.106.0/23
IP: 160.30.229.0/24
IP: 160.30.232.0/23
IP: 160.30.235.0/24
IP: 160.187.186.0/23
IP: 160.250.152.0/22
IP: 161.122.0.0/16
IP: 162.4.5.0/24
IP: 162.4.50.0/23
IP: 164.124.0.0/15
IP: 165.132.0.0/15
IP: 165.141.0.0/16
IP: 165.186.0.0/16
IP: 165.194.0.0/16
IP: 165.213.0.0/16
IP: 165.229.0.0/16
IP: 165.243.0.0 -- 165.244.255.255
IP: 165.246.0.0/16
IP: 166.79.0.0/16
IP: 166.103.0.0 -- 166.104.255.255
IP: 166.125.0.0/16
IP: 168.78.0.0/16
IP: 168.115.0.0/16
IP: 168.126.0.0/16
IP: 168.131.0.0/16
IP: 168.154.0.0/16
IP: 168.188.0.0/16
IP: 168.219.0.0/16
IP: 168.248.0.0/15
IP: 169.140.0.0/16
IP: 169.208.0.0/12
IP: 192.5.90.0/24
IP: 192.100.2.0/24
IP: 192.104.15.0/24
IP: 192.132.15.0/24
IP: 192.132.247.0 -- 192.132.251.255
IP: 192.195.39.0 -- 192.195.40.255
IP: 192.203.138.0 -- 192.203.146.255
IP: 192.245.249.0 -- 192.245.251.255
IP: 192.249.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32855 (0x8057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 6 12:47:35 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.134.0.0/16
129.254.0.0/16
134.75.0.0/16
137.68.0.0/16
138.252.134.0/23
139.150.0.0/16
143.248.0.0/16
147.6.0.0/16
147.43.0.0/16
147.46.0.0/15
152.99.0.0/16
152.149.0.0/16
155.230.0.0/16
156.147.0.0/16
157.66.64.0/23
157.197.0.0/16
158.44.0.0/16
160.30.106.0/23
160.30.229.0/24
160.30.232.0/23
160.30.235.0/24
160.187.186.0/23
160.250.152.0/22
161.122.0.0/16
162.4.5.0/24
162.4.50.0/23
164.124.0.0/15
165.132.0.0/15
165.141.0.0/16
165.186.0.0/16
165.194.0.0/16
165.213.0.0/16
165.229.0.0/16
165.243.0.0-165.244.255.255
165.246.0.0/16
166.79.0.0/16
166.103.0.0-166.104.255.255
166.125.0.0/16
168.78.0.0/16
168.115.0.0/16
168.126.0.0/16
168.131.0.0/16
168.154.0.0/16
168.188.0.0/16
168.219.0.0/16
168.248.0.0/15
169.140.0.0/16
169.208.0.0/12
192.5.90.0/24
192.100.2.0/24
192.104.15.0/24
192.132.15.0/24
192.132.247.0-192.132.251.255
192.195.39.0-192.195.40.255
192.203.138.0-192.203.146.255
192.245.249.0-192.245.251.255
192.249.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:a8:b7:64:9a:28:ec:71:a9:ea:34:f6:ea:a3:78:f1:9b:30:
4b:c6:c0:86:3e:b5:7e:6b:ef:40:71:a9:45:a2:29:6c:c9:16:
4b:02:4f:61:b6:bf:7c:0e:bd:9e:63:c6:67:9f:17:7b:c9:3a:
9a:ef:88:c5:bc:6d:ed:31:7e:4d:d5:47:ba:8d:08:8b:51:58:
d8:8d:ef:73:5d:2b:9c:91:7d:3d:39:22:88:6b:37:c2:c5:e3:
8a:60:ac:ba:ab:80:9e:81:ce:89:4f:87:cb:5a:b2:88:7d:48:
30:9c:32:b1:b1:10:11:90:22:98:61:ff:f6:a3:5e:51:61:41:
10:47:a1:74:e2:c8:18:a2:0c:20:28:52:53:25:e9:bf:55:15:
f7:47:68:b8:72:13:46:4a:b2:f9:31:d8:fd:63:e9:a5:72:1f:
96:88:bf:00:3a:e2:02:40:34:9e:3d:67:f8:20:dd:0d:8b:63:
59:c9:7f:d1:08:21:0c:ba:7a:98:ba:22:bd:08:6f:c6:ce:4d:
cb:6a:5e:a4:fc:bb:ea:54:fa:aa:e3:c8:db:5e:ef:e6:08:7d:
5c:58:50:e0:c2:56:97:83:77:69:9c:6a:92:45:b1:ee:0e:73:
fb:50:d1:41:1f:56:a1:85:e4:4e:39:fc:cf:e9:50:61:bd:3a:
c0:d4:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:43 2026 by rpki-client