Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
File: whcUQpGt4TEa-2LQLllQN8jatdw.cer (raw, json)
Hash identifier: nazCyHPq66FuMNByxW85JD6Z0Sj3WxxeFpClDxSnxVk=
Subject key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8036
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 01:53:28 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.115.0/24
IP: 160.236.230.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32822 (0x8036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 01:53:28 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:57:2c:82:23:94:20:c7:0a:5d:b2:f2:48:
4b:62:13:26:dd:16:f4:65:5d:62:e1:15:41:16:b3:
fa:5f:6e:2f:a1:0a:25:48:06:35:25:a2:e0:73:e4:
92:81:c6:5b:e2:0f:2c:53:b9:12:cb:cf:2b:cf:d0:
4f:9b:52:6f:be:84:0f:89:e8:e9:2c:73:c3:3d:6e:
5e:5d:ea:c8:d1:f3:a8:4c:fb:ea:93:84:a5:e7:d5:
f6:e7:2c:8f:4f:1b:b3:7d:b5:93:fd:72:b4:40:28:
91:00:24:55:d3:f4:f9:71:3a:b4:d0:06:20:03:f9:
a2:61:54:e7:71:56:21:f4:28:b4:23:c6:fd:c3:0e:
14:3b:95:9a:8b:18:8f:a3:7c:c4:57:32:6d:f2:89:
8d:62:30:cd:10:3c:99:60:fd:03:a0:f7:89:c6:cd:
a3:85:02:48:be:77:cf:43:b4:7f:f3:2c:ea:6c:96:
3d:d5:7e:c1:12:1e:e6:9c:4f:ef:8f:7b:33:16:64:
6d:94:2d:af:0e:20:23:a4:0f:38:d1:ee:92:a8:66:
ce:6a:b9:38:fe:20:08:73:24:8b:ad:6a:03:43:22:
15:f2:e0:ae:1f:ce:dd:d5:fe:50:5a:9a:3c:43:91:
11:8f:70:fa:5c:f4:db:15:7d:6e:7f:f4:1e:4a:6f:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.115.0/24
160.236.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3c:c8:8b:93:b7:32:86:46:3e:17:9b:7f:cb:56:45:0b:4a:
f9:c2:c3:5c:6c:2a:76:b5:66:ac:8c:2f:1b:eb:d2:ff:d6:d4:
7e:82:dc:43:e4:b1:62:4d:5c:7f:56:4b:16:d4:58:ee:c5:e5:
1c:b4:a6:06:88:8a:29:5d:7f:d3:bd:24:7b:1f:96:1f:b0:78:
12:96:31:c2:99:af:66:c3:f7:5f:60:d6:e3:c0:19:1d:82:bf:
74:54:13:d4:de:3a:1a:4d:c6:6d:b6:1e:f1:b0:37:38:83:ef:
65:9c:d3:e3:7a:7c:26:02:84:65:7b:18:51:e1:fa:35:c5:47:
c8:0b:2e:58:59:16:25:fb:60:77:fe:9d:7b:d1:14:ca:f6:91:
71:b6:54:23:07:77:c4:d7:d5:a2:25:02:61:a4:4e:ea:d5:ac:
d1:65:65:89:ea:6b:6f:74:cb:cd:c8:2c:85:80:56:fa:b7:d9:
7e:a8:6e:da:c3:de:f5:de:ce:1d:8e:ad:28:d2:b5:07:9c:ae:
be:c9:6e:d2:d8:98:e4:70:df:fa:6b:bd:56:d4:3e:94:93:57:
46:b3:63:e1:2b:13:23:15:39:2e:07:b4:b2:1d:22:d9:e2:e4:
d7:c7:28:a1:59:82:32:4c:31:00:a3:9a:98:6b:fd:b1:0d:99:
9e:c3:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:51 2026 by rpki-client