Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
File: 4bkQuccxDJ9lWU_G6JifyVOzblE.cer (raw, json)
Hash identifier: dJNN7KKRisJzs3ZQXyxiTPgwGDAmxJfIM1NKLe1Rvrk=
Subject key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 846B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Nov 2026 13:50:44 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 52.128.224.0/19
IP: 148.66.0.0/19
IP: 216.118.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33899 (0x846b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 2 13:50:44 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:0d:be:da:a7:ca:34:17:78:2e:e2:5d:88:
22:15:d0:24:1a:ff:8b:b3:6c:f6:ae:2c:d4:8e:e4:
1f:89:d7:cc:ad:34:e3:f8:f4:0d:d2:ff:57:68:0a:
41:44:cf:2b:f1:82:24:48:41:58:bc:45:39:6c:00:
4a:17:36:74:70:fa:37:23:55:22:3d:57:84:3a:f6:
3c:2e:05:88:42:e6:2a:de:49:8c:44:48:ef:38:13:
bf:70:cc:97:29:dd:0b:eb:4b:8d:50:94:cd:51:23:
c1:7c:5a:d1:be:cb:1f:30:bd:e4:3b:a2:bc:80:2d:
1f:49:cb:f6:bd:42:d9:d0:00:f7:8a:d3:38:9e:c7:
70:46:2c:42:48:ab:cf:49:8d:18:ad:bc:9b:17:57:
ef:c4:bb:f2:96:ee:0e:df:ba:f7:47:a2:f0:d8:94:
e0:ef:33:7f:b3:f6:9f:b1:8f:2d:b9:c4:9c:f5:7b:
ae:2e:48:90:d9:bf:4b:05:34:4e:8e:68:5d:17:ba:
1c:67:32:a5:7e:d5:27:f3:bc:f9:0e:c4:82:fd:c6:
ce:e4:b5:3e:c7:ec:25:1a:50:9c:0d:45:ac:cd:07:
de:7e:e2:2b:80:7a:19:d5:ee:7e:3e:9e:59:06:c3:
18:a8:49:47:1e:d1:49:22:42:38:ca:91:e0:c6:57:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
52.128.224.0/19
148.66.0.0/19
216.118.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:d7:f2:9d:90:26:85:8b:1e:96:41:59:62:42:c4:8f:14:b7:
f8:5f:6e:8b:70:a8:d5:57:35:ef:43:2b:6e:61:a8:a7:df:93:
0d:bd:a8:29:1c:0b:33:a6:a1:38:d7:09:14:07:8b:9c:b6:a5:
fd:50:de:d2:dc:6d:3b:90:b7:61:4b:51:31:12:b2:26:a7:a3:
2e:c1:17:66:3a:30:7b:e5:46:a2:1a:16:4e:c0:41:f8:42:6d:
d7:5b:c1:8b:a6:ca:51:37:bc:53:c8:a2:09:a3:02:7f:0f:1e:
27:58:5c:f7:30:b4:45:c0:3b:34:ba:36:75:fa:14:92:eb:33:
ba:3d:84:1e:11:80:5f:36:27:f7:31:42:81:23:d5:1b:ed:89:
6c:70:ac:86:f8:b8:21:f0:a3:06:6c:10:88:d8:ec:21:d9:19:
a6:d4:86:ff:20:b1:67:b5:dd:29:ad:f2:cf:6b:05:c8:29:ca:
2d:37:35:9a:6c:82:ab:02:d4:92:85:d1:1d:d3:44:c5:5e:1c:
8a:ca:5f:f1:36:a0:7b:45:52:a7:67:d4:7b:6c:a6:6a:3b:96:
b1:9e:60:76:1d:3a:f2:95:21:b2:37:57:ef:66:e5:d0:e7:e5:
22:f6:97:50:27:e9:95:2c:32:af:d9:16:24:d7:82:8b:b6:57:
37:30:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:22:23 2026 by rpki-client