Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
File: 36hgRQpvzrHG57jU_1SxVBobabM.cer (raw, json)
Hash identifier: RHFSuz1GTZa9bn4WS7ZIK9/6ZlDLlAduoJX/LoeBs0w=
Subject key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8323
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 12:59:05 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 146.144.8.0/23
IP: 152.147.0.0/16
IP: 157.128.0.0/16
IP: 192.189.208.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33571 (0x8323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 2 12:59:05 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:47:5f:13:57:bf:24:05:23:2f:29:3f:90:
af:91:bd:de:43:e0:02:38:68:7d:86:74:a0:10:1c:
03:bf:36:c2:8a:f4:d7:e5:bd:f3:23:8d:f1:d9:0e:
b5:53:2d:18:61:de:c0:8a:a6:77:da:57:73:04:5a:
f5:9a:59:a0:1d:0a:4b:6e:8b:c3:0d:f0:9c:0e:7b:
d4:6b:3c:b9:f9:7a:b3:a0:e0:a0:c0:cb:69:bf:18:
ae:3e:9e:4e:5b:14:df:3b:73:bf:5b:b0:25:8d:bd:
d4:8d:46:58:73:c8:4f:77:29:32:e8:fe:12:c2:e9:
8f:fd:43:89:60:d7:03:a6:f6:8b:e8:db:46:c5:4a:
36:4c:e4:b6:2f:10:7c:82:66:46:c9:9b:6b:ed:00:
b6:d0:43:64:d4:6c:19:48:15:b4:f7:80:cd:36:e4:
c8:7f:35:37:d3:4c:37:26:76:f4:35:9b:9b:72:99:
d3:be:14:a4:d0:df:7f:12:6e:ec:c4:bd:19:02:49:
a2:3d:f5:95:a1:66:72:dd:5f:14:d9:e7:e3:35:c2:
ba:97:0b:e8:f6:11:d2:8c:a0:17:bb:31:b4:12:fe:
54:b9:04:d0:9c:fa:29:8c:21:f8:80:25:88:95:b2:
1e:9f:ca:dd:42:76:30:2a:65:66:76:98:15:a4:ab:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.144.8.0/23
152.147.0.0/16
157.128.0.0/16
192.189.208.0/24
Signature Algorithm: sha256WithRSAEncryption
28:62:eb:ab:4d:7c:6f:c1:59:2f:cc:cb:16:b5:c7:24:1a:c8:
a6:a0:92:10:1c:ad:1a:90:2e:74:4c:db:df:0d:71:91:45:2f:
9e:8e:9b:a6:8d:48:57:c2:50:ec:61:66:a9:d6:02:38:b0:50:
5d:aa:d9:e4:1b:ca:e5:2d:35:65:8a:5b:78:0b:33:f2:a5:25:
c1:29:63:19:e1:62:89:53:fe:1a:45:bd:41:f4:73:cb:71:31:
fa:55:2c:48:83:81:0f:b3:59:c8:ca:e9:69:9c:6f:c2:59:ce:
a8:89:e3:ae:b5:b3:0c:26:bb:91:8a:98:9f:2b:70:7f:62:5a:
7b:29:2e:34:e8:ce:43:98:91:d5:83:34:2a:a3:5c:95:56:63:
7f:58:79:63:94:3a:82:59:42:6f:4e:fe:1f:98:0a:73:e9:f6:
83:e7:25:3f:9d:2f:4d:b8:59:fe:36:1d:3d:d4:3d:4f:db:83:
6d:8a:f5:c7:f3:a6:f7:30:36:40:63:0f:55:c0:8d:bf:aa:98:
26:0a:d0:34:3c:ac:c9:5a:fb:90:0f:24:55:b1:b4:e8:64:e9:
27:8f:18:c9:d7:bc:4d:b2:0d:06:bf:44:2c:91:dc:98:a1:18:
f4:92:20:ea:e6:56:da:12:e9:c5:eb:af:55:9b:67:c2:10:26:
b5:52:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:29:08 2026 by rpki-client