Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (raw, json)
Hash identifier: NeCxFow7kBXkFh/UwPzYDU64nBCugUP7ufkzyj5XtKY=
Subject key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4C1F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Oct 2026 02:58:46 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 177.0.128.0/20
IP: 177.2.16.0/20
IP: 177.2.176.0/20
IP: 177.3.32.0/20
IP: 177.3.80.0/20
IP: 177.4.0.0/20
IP: 177.4.32.0/20
IP: 177.4.80.0/20
IP: 177.5.48.0 -- 177.5.79.255
IP: 177.5.112.0/20
IP: 177.5.176.0/20
IP: 177.6.176.0/20
IP: 177.7.128.0/20
IP: 177.201.224.0/20
IP: 179.236.96.0/20
IP: 187.53.80.0/20
IP: 187.53.192.0/20
IP: 187.54.48.0/20
IP: 187.55.112.0/20
IP: 187.126.64.0/20
IP: 189.10.48.0/20
IP: 189.75.0.0/20
IP: 189.75.144.0/20
IP: 191.223.32.0/20
IP: 200.97.32.0/20
IP: 200.217.96.0/20
IP: 200.222.224.0/20
IP: 200.225.144.0/20
IP: 201.15.128.0/20
IP: 201.15.160.0/20
IP: 201.15.208.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19487 (0x4c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Oct 13 02:58:46 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:68:63:4c:67:7b:b1:e8:d4:5b:95:58:13:
3b:d0:ee:49:fd:ff:ae:b6:02:bf:a7:31:2b:93:0b:
4a:bb:82:e6:d6:4a:b7:d2:3d:2f:4f:ab:d2:d9:1d:
2c:ff:ca:e5:08:2e:d0:7a:87:da:28:30:c0:0f:d5:
b6:70:97:e6:36:3d:e4:f6:f5:06:ad:95:b0:3a:de:
53:e9:7a:72:3c:ee:ce:f3:3c:7e:de:3e:51:7f:4f:
d9:17:e1:02:44:c4:38:2b:7c:ce:bc:d5:a8:75:57:
62:91:a6:35:8d:8c:d9:f8:e3:1d:56:e1:41:92:fb:
28:be:80:17:7c:1c:c1:18:9b:79:98:9a:21:9a:f0:
44:c2:bb:54:ad:67:f2:10:d9:be:01:2a:53:b8:d6:
8d:da:9a:65:fa:46:d3:6a:a5:03:4d:e8:e4:b7:2e:
da:9e:f7:d3:ba:b7:bb:6a:40:38:ae:ab:fc:11:c3:
f8:cc:d7:c8:da:1f:da:6e:e1:6b:bb:93:d0:48:ec:
3a:52:eb:ee:31:91:5a:33:96:c2:19:28:69:7d:83:
70:fe:83:0c:69:69:2b:b8:69:2e:c3:9c:b7:de:d6:
2c:b7:41:e0:c3:97:3a:b0:6e:0a:a8:af:a7:41:34:
d7:06:c4:49:e3:fa:58:39:a0:0d:3b:82:74:c6:9d:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.0.128.0/20
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
177.201.224.0/20
179.236.96.0/20
187.53.80.0/20
187.53.192.0/20
187.54.48.0/20
187.55.112.0/20
187.126.64.0/20
189.10.48.0/20
189.75.0.0/20
189.75.144.0/20
191.223.32.0/20
200.97.32.0/20
200.217.96.0/20
200.222.224.0/20
200.225.144.0/20
201.15.128.0/20
201.15.160.0/20
201.15.208.0/20
Signature Algorithm: sha256WithRSAEncryption
17:68:9a:51:4f:3c:d9:ab:a5:14:76:59:f7:07:86:e3:24:e8:
7e:98:da:db:58:f6:2d:68:2a:71:62:83:83:c0:9d:55:ae:3a:
e3:e1:6a:27:0a:92:b6:10:a7:d4:ce:8c:a2:6d:a4:cb:9a:1f:
dd:fa:cd:85:12:63:9b:37:f4:19:10:18:17:0d:26:42:52:d6:
b5:86:39:91:e2:ac:f4:eb:b2:52:aa:5f:6b:79:af:3e:1e:e6:
b1:61:6e:41:24:67:d0:cd:7a:08:c6:06:17:a8:fb:1f:8e:6a:
d0:21:d0:6e:94:5d:eb:b3:dd:62:61:bc:44:ac:2c:ea:94:dd:
cf:c2:74:04:d0:70:9f:72:3e:54:6e:2a:2d:cd:fa:5f:9a:f1:
87:fa:f4:4b:40:d4:83:c3:38:ed:9b:a6:c0:e4:3a:c7:38:0c:
be:f2:75:6a:20:d6:b1:a2:05:a5:76:b8:37:5b:3a:76:c6:46:
05:62:a5:50:cb:e2:2c:d9:aa:ca:f2:00:ff:d5:f9:ff:a0:e1:
86:3a:ac:0f:7a:3d:02:be:12:0c:24:4e:fe:35:9c:08:db:41:
d6:3c:2e:87:00:7e:db:3f:50:81:cb:be:f7:e9:57:cd:be:d1:
22:a3:f5:4d:b1:9b:8e:41:e9:59:42:ef:45:2f:ef:d6:7b:2c:
59:79:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:45:09 2026 by rpki-client