Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
File: D7ep-f-5NrdU2MC2yClQpAHeosc.cer (raw, json)
Hash identifier: mKI10Vzia24a47oX3HYvybqg3b7NLG/MXBpBbuulWXc=
Subject key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8215
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 13:02:04 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.164.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33301 (0x8215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 9 13:02:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:56:03:99:07:fe:45:54:28:4c:b3:4e:a6:
aa:fc:6c:0d:d9:76:49:03:bb:e7:8d:be:22:aa:42:
77:b2:c6:d6:30:c1:da:93:bf:eb:59:b8:81:74:1a:
c3:f6:16:84:58:a7:73:39:e4:f8:21:63:f9:97:b2:
e3:de:05:07:63:ea:2e:20:eb:46:a8:7e:03:96:a8:
5c:e8:6a:1f:ae:d6:aa:ad:e6:c1:81:da:f2:4a:aa:
b1:e7:0b:3e:10:57:c4:b5:81:8f:b0:3c:7d:8c:6a:
f6:14:e4:cd:d8:42:8a:02:a3:12:d7:9c:89:5f:58:
75:2e:5d:f8:15:19:b2:19:3d:9d:00:fb:71:58:90:
2d:cf:a3:8e:e9:69:c7:cc:dc:f6:0b:5c:ec:8f:cb:
fb:95:86:3a:67:38:99:d6:ba:20:ec:b9:74:11:5f:
55:21:84:d1:7f:3b:66:fb:a4:a1:55:7f:b2:95:8b:
a5:71:88:a9:a6:4d:d8:d4:be:0e:87:2b:18:6f:36:
dd:07:65:aa:ac:1c:54:bd:c4:e9:a1:ba:fe:ac:31:
b9:1d:35:7a:36:d8:e6:c7:03:d8:37:ff:c0:f2:00:
a1:7c:aa:27:c9:59:60:2f:7e:30:6e:ff:86:6e:41:
73:41:a2:b1:48:10:40:89:f6:87:9c:ea:b3:18:1e:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7e:84:af:4a:87:68:6a:ce:e1:73:d5:6b:df:9b:7f:67:98:
e5:f7:25:b5:67:87:eb:09:ba:b5:01:85:7b:b3:f0:33:40:ad:
ad:30:cb:61:0e:40:7c:59:4e:f8:a0:ec:e9:49:23:f1:16:17:
11:e5:88:81:49:57:6f:db:2b:91:58:bb:7e:46:99:1f:a5:1f:
7d:28:47:d1:10:e3:1d:56:7b:c3:5b:a7:99:49:3b:9f:73:6c:
4c:c7:7c:f2:54:32:80:9e:1c:08:10:ba:d8:0d:4b:04:1e:ef:
11:a8:de:c6:ba:f5:ca:a6:7c:5d:f3:d6:66:e3:0c:fe:8c:e6:
4f:50:13:5e:07:88:87:1e:18:7c:87:93:b4:61:5c:5e:5b:d4:
4c:d1:cc:c1:0c:d4:6c:0c:59:ea:f1:55:5f:2d:cb:fc:d4:7a:
c0:2d:2d:bc:9e:17:f9:f5:68:d5:7f:96:1a:09:f8:ff:7b:2d:
de:1d:b9:6c:f7:6c:e7:b7:53:9b:73:7d:d6:99:11:72:84:34:
c5:84:f5:c5:a1:c4:96:22:94:91:8c:f3:ed:8d:c2:f9:ea:6b:
ab:b2:ef:ec:35:5a:1f:e7:f6:cb:76:1c:65:60:20:3a:d5:3d:
4c:3b:68:c3:aa:9b:c1:2d:41:2d:5f:6a:9b:26:fd:f0:31:93:
09:72:41:6a
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIIVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkwOTEzMDIwNFoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjhFOTgxMTAvBgNVBAUTKDBGQjdBOUY5RkZCOTM2Qjc1NEQ4QzBC
NkM4Mjk1MEE0MDFERUEyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuI1YDmQf+RVQoTLNOpqr8bA3ZdkkDu+eNviKqQneyxtYwwdqTv+tZuIF0GsP2
FoRYp3M55PghY/mXsuPeBQdj6i4g60aofgOWqFzoah+u1qqt5sGB2vJKqrHnCz4Q
V8S1gY+wPH2MavYU5M3YQooCoxLXnIlfWHUuXfgVGbIZPZ0A+3FYkC3Po47pacfM
3PYLXOyPy/uVhjpnOJnWuiDsuXQRX1UhhNF/O2b7pKFVf7KVi6VxiKmmTdjUvg6H
KxhvNt0HZaqsHFS9xOmhuv6sMbkdNXo22ObHA9g3/8DyAKF8qifJWWAvfjBu/4Zu
QXNBorFIEECJ9oec6rMYHkDBAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUD7ep+f+5
NrdU2MC2yClQpAHeoscwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4RTk4LzY4Qjk1REYwODk3QzExRjFCNDU2MjM0NzcwMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2OEU5OC82OEI5NURGMDg5N0MxMUYxQjQ1NjIzNDc3MDExRjk3MC9EN2VwLWYt
NU5yZFUyTUMyeUNsUXBBSGVvc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACg7KQwDQYJKoZIhvcNAQELBQADggEBABt+hK9Kh2hqzuFz1Wvf
m39nmOX3JbVnh+sJurUBhXuz8DNAra0wy2EOQHxZTvig7OlJI/EWFxHliIFJV2/b
K5FYu35GmR+lH30oR9EQ4x1We8Nbp5lJO59zbEzHfPJUMoCeHAgQutgNSwQe7xGo
3sa69cqmfF3z1mbjDP6M5k9QE14HiIceGHyHk7RhXF5b1EzRzMEM1GwMWerxVV8t
y/zUesAtLbyeF/n1aNV/lhoJ+P97Ld4duWz3bOe3U5tzfdaZEXKENMWE9cWhxJYi
lJGM8+2Nwvnqa6uy7+w1Wh/n9st2HGVgIDrVPUw7aMOqm8EtQS1fapsm/fAxkwly
QWo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:04:11 2026 by rpki-client