Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
File: -SffOEirq8qI_z2VoeWxZ1TGOlM.cer (raw, json)
Hash identifier: mAwyIdODODntBLj6fAICPQ//RxJudkx1wWyJAPgWkRs=
Subject key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 567D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Manifest: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Thu 12 Nov 2026 13:14:16 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 56868
IP: 82.158.128.0/19
IP: 85.137.28.0/23
IP: 141.229.2.0 -- 141.229.5.255
IP: 141.229.8.0/23
IP: 141.229.24.0/23
IP: 151.158.4.0/23
IP: 151.158.10.0/23
IP: 151.158.36.0/23
IP: 151.158.42.0/23
IP: 151.158.54.0 -- 151.158.57.255
IP: 151.158.74.0/23
IP: 151.158.82.0 -- 151.158.85.255
IP: 151.158.92.0/23
IP: 151.158.106.0/23
IP: 151.158.132.0/23
IP: 151.158.150.0/23
IP: 151.158.176.0/24
IP: 151.158.183.0/24
IP: 151.158.186.0/23
IP: 151.158.202.0 -- 151.158.205.255
IP: 151.158.234.0/24
IP: 151.158.236.0/23
IP: 151.158.239.0 -- 151.158.241.255
IP: 151.158.250.0/24
IP: 212.117.48.0/20
IP: 2001:7fa:2::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22141 (0x567d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 12 13:14:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:d0:0b:13:31:0e:50:62:e2:c0:c0:82:ea:
de:d6:33:0e:60:61:e1:6e:cb:a2:5a:d2:5b:5b:b2:
30:41:15:ca:b2:e5:fe:be:c0:69:e3:5a:b5:58:c9:
d3:a9:4f:21:b1:14:76:f8:c6:ba:8c:2f:ac:c5:2f:
51:11:13:89:67:6c:65:a5:04:c2:0a:a9:ef:c5:86:
9d:43:fd:e9:3b:d7:d1:28:d4:47:7b:06:a9:4a:40:
87:3e:26:d2:ea:68:7c:00:30:e4:9a:54:c6:1a:5b:
c8:60:0c:f9:67:f3:f0:7f:86:c2:68:92:b5:fd:a8:
5f:41:a0:d8:1c:0c:55:f6:6e:c3:5d:c9:28:ae:77:
f3:c3:6f:a8:52:98:8d:9e:2c:2d:6f:58:fa:e1:3e:
72:f3:c2:e3:b7:f6:e6:5e:f6:d4:4f:bc:64:30:19:
58:6f:85:40:39:2e:c7:e7:63:16:cd:9a:44:43:1a:
26:0a:21:12:c1:2f:1f:d1:73:44:6a:ff:24:38:d8:
b3:c8:46:30:d3:e4:12:1a:a5:b4:b2:bf:18:ef:86:
d2:86:d7:12:a3:6b:34:ce:df:45:9a:fe:73:b6:8e:
eb:c5:7c:05:fd:32:73:c0:ee:8c:d6:be:4b:d0:3b:
50:37:23:b7:55:21:61:26:20:f4:4c:cf:9a:fc:99:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56868
sbgp-ipAddrBlock: critical
IPv4:
82.158.128.0/19
85.137.28.0/23
141.229.2.0-141.229.5.255
141.229.8.0/23
141.229.24.0/23
151.158.4.0/23
151.158.10.0/23
151.158.36.0/23
151.158.42.0/23
151.158.54.0-151.158.57.255
151.158.74.0/23
151.158.82.0-151.158.85.255
151.158.92.0/23
151.158.106.0/23
151.158.132.0/23
151.158.150.0/23
151.158.176.0/24
151.158.183.0/24
151.158.186.0/23
151.158.202.0-151.158.205.255
151.158.234.0/24
151.158.236.0/23
151.158.239.0-151.158.241.255
151.158.250.0/24
212.117.48.0/20
IPv6:
2001:7fa:2::/48
Signature Algorithm: sha256WithRSAEncryption
3b:c7:97:0a:5e:db:ed:c8:a1:74:8c:07:99:dc:76:db:0d:32:
09:23:f3:35:fe:a9:f7:2f:52:4f:9b:21:1a:b1:2c:92:a7:7f:
f6:0d:36:3f:fe:80:a9:0b:2d:26:86:af:8d:03:ac:67:d1:1d:
a9:7a:d7:81:ce:20:61:25:22:00:f1:07:3f:27:5d:73:83:76:
68:a8:21:80:1d:37:cd:d8:9c:41:f3:cf:04:aa:48:b3:f0:4f:
40:1d:e0:89:6f:de:cf:36:ca:7b:3a:5f:e9:cb:1d:7a:d6:02:
59:74:e3:f9:4b:fd:c4:af:7b:29:f0:a6:02:0c:87:57:6e:43:
ef:0c:55:0f:78:62:f0:c1:b6:51:be:a4:7d:11:cd:e9:c3:a4:
9c:df:3b:31:c2:12:00:ec:c3:89:0e:f2:92:31:bf:a8:62:c2:
58:fa:75:4b:cb:89:1e:31:7d:16:b5:8e:72:a9:e6:bb:07:7f:
c4:bc:31:2e:bd:c1:f8:b5:a1:e0:4d:88:c6:0a:8b:94:03:28:
7d:d8:29:2b:02:b4:0e:62:d7:bc:cc:d9:ac:72:9a:28:09:93:
93:1c:6f:c6:95:b7:1d:a3:38:b5:ad:b7:59:77:4a:1e:4a:db:
34:09:6b:37:43:41:48:b2:91:f1:e9:65:46:9f:ac:65:0b:97:
e7:e5:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:37:10 2026 by rpki-client