Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/u_Gz58XB6yDJVjW4jkE07DamSWA.cer
File: u_Gz58XB6yDJVjW4jkE07DamSWA.cer (raw, json)
Hash identifier: /cWiSXJLUhiEHMWpJvg6jcSRoa6h2/LjcNVn8dchMGQ=
Subject key identifier: BB:F1:B3:E7:C5:C1:EB:20:C9:56:35:B8:8E:41:34:EC:36:A6:49:60
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4BCB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 14:50:08 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 187.7.32.0/19
IP: 187.52.224.0/19
IP: 187.53.160.0/19
IP: 187.54.224.0/19
IP: 187.55.64.0/19
IP: 187.55.128.0/19
IP: 187.78.128.0/19
IP: 187.79.128.0/20
IP: 189.10.144.0/20
IP: 189.10.208.0/20
IP: 189.12.0.0/19
IP: 189.31.224.0/19
IP: 189.72.96.0/19
IP: 189.105.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19403 (0x4bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Sep 16 14:50:08 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A918D6B7, serialNumber=BBF1B3E7C5C1EB20C95635B88E4134EC36A64960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:00:8f:6f:d7:df:10:59:cc:21:25:11:40:
89:da:20:98:37:12:25:3e:6b:c8:a5:df:e6:02:27:
97:2a:c2:fc:d9:5b:5d:38:80:cd:09:77:b7:2a:0e:
ce:a3:09:0a:27:80:e7:13:7e:97:67:3d:aa:03:dd:
a7:36:13:0b:5a:dd:51:a7:bb:e1:1d:fb:25:28:5b:
17:1b:da:04:d5:9b:5c:09:57:b5:07:2e:13:28:87:
20:bc:1d:90:72:71:ac:6e:94:51:05:8b:fb:c9:5d:
e9:a0:3e:b4:49:7b:36:a0:1c:55:52:6f:fd:dd:c3:
3a:92:21:77:21:1b:8e:1c:a6:63:b6:5c:b5:f4:f6:
78:77:b2:c4:50:9e:2a:99:a0:98:b9:a6:40:ad:89:
79:45:3f:07:e1:de:d4:44:45:11:8f:d9:e2:dd:10:
c6:49:47:56:79:95:c1:4d:3b:5d:5a:9c:39:82:dd:
56:07:00:ed:c9:4a:fa:b3:e6:db:83:94:7f:e3:86:
60:08:18:38:9b:19:6d:1e:cd:7b:9b:b8:ee:c2:a6:
44:05:5a:17:53:b1:b4:2a:4f:e0:9b:95:47:56:2b:
7e:83:78:21:f4:6e:c6:56:33:f5:87:ae:fe:f8:8e:
7f:85:3a:60:e4:f6:45:01:86:e6:eb:94:a8:44:e3:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F1:B3:E7:C5:C1:EB:20:C9:56:35:B8:8E:41:34:EC:36:A6:49:60
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
187.7.32.0/19
187.52.224.0/19
187.53.160.0/19
187.54.224.0/19
187.55.64.0/19
187.55.128.0/19
187.78.128.0/19
187.79.128.0/20
189.10.144.0/20
189.10.208.0/20
189.12.0.0/19
189.31.224.0/19
189.72.96.0/19
189.105.16.0/20
Signature Algorithm: sha256WithRSAEncryption
82:0d:55:70:ec:46:d2:2b:55:7c:22:9d:ef:85:b5:10:1c:b6:
bd:1f:93:16:53:30:a2:43:c3:75:d9:70:dd:f4:80:b6:ec:ca:
1c:91:62:a7:c3:9c:56:21:fb:69:81:1f:ac:f3:aa:94:60:90:
3c:6e:98:9d:62:29:2b:1e:0b:5a:23:85:1b:28:5f:0e:01:04:
9b:98:b4:b1:ad:ac:39:07:05:41:55:20:e7:64:49:dd:b7:46:
89:86:0b:76:99:e2:c9:7b:1c:16:50:a4:3c:ed:c1:30:89:d6:
42:4d:bc:b6:a0:5c:a3:45:0a:d5:9b:a0:6b:2b:02:19:f9:b0:
69:df:2c:9d:28:d4:69:4c:40:20:a5:5e:56:15:d6:76:fd:7b:
e9:71:70:f4:9f:88:4b:eb:21:0d:0e:71:49:90:ec:7a:fc:85:
ca:c1:7e:cb:a7:bf:4e:36:c4:67:25:03:64:82:f3:15:34:09:
0c:9f:8c:37:4f:3c:58:c6:98:37:bb:20:f8:06:88:59:5d:75:
6d:00:74:d4:e7:b0:d2:16:f7:35:ed:ba:50:5b:35:6c:9c:69:
6e:eb:45:45:46:5b:6c:24:c0:7c:d2:1b:1d:a2:86:81:b5:85:
4d:49:f3:a8:bc:10:98:58:5c:cf:c4:fe:d4:cd:ef:8f:5f:3c:
fc:d8:ea:a3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgICS8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0
OTRCQUY5MzkwHhcNMjYwOTE2MTQ1MDA4WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RDZCNzExMC8GA1UEBRMoQkJGMUIzRTdDNUMxRUIyMEM5NTYzNUI4
OEU0MTM0RUMzNkE2NDk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANQ6AI9v198QWcwhJRFAidogmDcSJT5ryKXf5gInlyrC/NlbXTiAzQl3tyoOzqMJ
CieA5xN+l2c9qgPdpzYTC1rdUae74R37JShbFxvaBNWbXAlXtQcuEyiHILwdkHJx
rG6UUQWL+8ld6aA+tEl7NqAcVVJv/d3DOpIhdyEbjhymY7ZctfT2eHeyxFCeKpmg
mLmmQK2JeUU/B+He1ERFEY/Z4t0QxklHVnmVwU07XVqcOYLdVgcA7clK+rPm24OU
f+OGYAgYOJsZbR7Ne5u47sKmRAVaF1OxtCpP4JuVR1YrfoN4IfRuxlYz9Yeu/viO
f4U6YOT2RQGG5uuUqETjiMUCAwEAAaOCA0EwggM9MB0GA1UdDgQWBBS78bPnxcHr
IMlWNbiOQTTsNqZJYDAfBgNVHSMEGDAWgBSWqF70uMr11MNaFX9OEl7klLr5OTAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2
MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRr
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ2QjcvRTcwQUU4OThCMUREMTFGMTk4MEU4MzY3ODlFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThENkI3L0U3MEFFODk4QjFERDExRjE5ODBFODM2Nzg5RUU1MjhFL3VfR3o1OFhC
NnlESlZqVzRqa0UwN0RhbVNXQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBtBggrBgEFBQcBBwEB/wReMFww
WgQCAAEwVAMEBbsHIAMEBbs04AMEBbs1oAMEBbs24AMEBbs3QAMEBbs3gAMEBbtO
gAMEBLtPgAMEBL0KkAMEBL0K0AMEBb0MAAMEBb0f4AMEBb1IYAMEBL1pEDANBgkq
hkiG9w0BAQsFAAOCAQEAgg1VcOxG0itVfCKd74W1EBy2vR+TFlMwokPDddlw3fSA
tuzKHJFip8OcViH7aYEfrPOqlGCQPG6YnWIpKx4LWiOFGyhfDgEEm5i0sa2sOQcF
QVUg52RJ3bdGiYYLdpniyXscFlCkPO3BMInWQk28tqBco0UK1ZugaysCGfmwad8s
nSjUaUxAIKVeVhXWdv176XFw9J+IS+shDQ5xSZDsevyFysF+y6e/TjbEZyUDZILz
FTQJDJ+MN088WMaYN7sg+AaIWV11bQB01Oew0hb3Ne26UFs1bJxpbutFRUZbbCTA
fNIbHaKGgbWFTUnzqLwQmFhcz8T+1M3vj188/Njqow==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:30 2026 by rpki-client