Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (raw, json)
Hash identifier: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=
Subject key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A2D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 00:31:28 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 177.0.128.0/20
IP: 177.2.16.0/20
IP: 177.2.176.0/20
IP: 177.3.32.0/20
IP: 177.3.80.0/20
IP: 177.4.0.0/20
IP: 177.4.32.0/20
IP: 177.4.80.0/20
IP: 177.5.48.0 -- 177.5.79.255
IP: 177.5.112.0/20
IP: 177.5.176.0/20
IP: 177.6.176.0/20
IP: 177.7.128.0/20
IP: 177.201.224.0/20
IP: 179.236.96.0/20
IP: 187.53.80.0/20
IP: 187.53.192.0/20
IP: 187.54.48.0/20
IP: 187.55.112.0/20
IP: 187.126.64.0/20
IP: 189.10.48.0/20
IP: 189.75.0.0/20
IP: 189.75.144.0/20
IP: 191.223.32.0/20
IP: 200.97.32.0/20
IP: 200.217.96.0/20
IP: 200.222.224.0/20
IP: 200.225.144.0/20
IP: 201.15.128.0/20
IP: 201.15.160.0/20
IP: 201.15.208.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18989 (0x4a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: May 14 00:31:28 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:68:63:4c:67:7b:b1:e8:d4:5b:95:58:13:
3b:d0:ee:49:fd:ff:ae:b6:02:bf:a7:31:2b:93:0b:
4a:bb:82:e6:d6:4a:b7:d2:3d:2f:4f:ab:d2:d9:1d:
2c:ff:ca:e5:08:2e:d0:7a:87:da:28:30:c0:0f:d5:
b6:70:97:e6:36:3d:e4:f6:f5:06:ad:95:b0:3a:de:
53:e9:7a:72:3c:ee:ce:f3:3c:7e:de:3e:51:7f:4f:
d9:17:e1:02:44:c4:38:2b:7c:ce:bc:d5:a8:75:57:
62:91:a6:35:8d:8c:d9:f8:e3:1d:56:e1:41:92:fb:
28:be:80:17:7c:1c:c1:18:9b:79:98:9a:21:9a:f0:
44:c2:bb:54:ad:67:f2:10:d9:be:01:2a:53:b8:d6:
8d:da:9a:65:fa:46:d3:6a:a5:03:4d:e8:e4:b7:2e:
da:9e:f7:d3:ba:b7:bb:6a:40:38:ae:ab:fc:11:c3:
f8:cc:d7:c8:da:1f:da:6e:e1:6b:bb:93:d0:48:ec:
3a:52:eb:ee:31:91:5a:33:96:c2:19:28:69:7d:83:
70:fe:83:0c:69:69:2b:b8:69:2e:c3:9c:b7:de:d6:
2c:b7:41:e0:c3:97:3a:b0:6e:0a:a8:af:a7:41:34:
d7:06:c4:49:e3:fa:58:39:a0:0d:3b:82:74:c6:9d:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.0.128.0/20
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
177.201.224.0/20
179.236.96.0/20
187.53.80.0/20
187.53.192.0/20
187.54.48.0/20
187.55.112.0/20
187.126.64.0/20
189.10.48.0/20
189.75.0.0/20
189.75.144.0/20
191.223.32.0/20
200.97.32.0/20
200.217.96.0/20
200.222.224.0/20
200.225.144.0/20
201.15.128.0/20
201.15.160.0/20
201.15.208.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:3f:62:a4:92:54:a2:f0:81:06:69:93:36:69:2f:86:e2:af:
05:4c:ae:5a:1e:e4:04:1a:b0:dd:5c:8c:36:ee:95:bc:43:fe:
07:40:ea:b3:49:62:b7:24:f1:24:b9:49:cf:dd:c0:f7:be:b4:
58:ae:6a:a7:9b:90:de:5d:5c:9f:85:b3:dc:b3:e9:90:68:57:
d0:fb:80:0f:cb:f9:b4:09:33:17:e3:aa:09:2a:89:92:0d:66:
8f:71:bf:d0:5b:4f:1b:82:70:a5:b8:b0:79:f7:16:fb:f7:b8:
ad:3a:2e:fa:d0:94:d2:a2:0d:01:cb:38:d3:5b:f2:3e:e3:d1:
1c:37:c4:87:4f:84:f5:77:bc:46:24:66:35:35:35:f8:a3:ee:
37:41:ad:6f:c0:3c:97:27:f0:55:dc:d3:e8:b2:ad:69:a9:51:
d6:76:33:c9:b8:45:81:1f:b0:c4:55:07:9e:bc:81:4a:73:8d:
04:b4:07:fa:6a:e1:7f:58:00:d2:15:19:be:85:26:1d:1d:b2:
99:1e:f8:c3:69:fa:b3:24:f0:e5:17:80:9b:9e:20:9d:7d:71:
7d:91:9c:5e:c0:1c:a6:89:6a:c7:88:d3:75:07:75:47:c6:40:
7d:57:32:fe:00:a2:58:d5:3d:90:f8:aa:2a:a6:41:08:24:f9:
8b:60:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:14:30 2026 by rpki-client