Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer (raw, json)
Hash identifier: NKrPXR+IVS8Ez5qyxY7Xvd+mMTcITwkEroFkF1saWpw=
Subject key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 567B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Manifest: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Nov 2026 13:13:31 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 56868
IP: 82.158.128.0/19
IP: 85.137.28.0/23
IP: 141.229.2.0 -- 141.229.5.255
IP: 141.229.8.0/23
IP: 141.229.24.0/23
IP: 151.158.4.0/23
IP: 151.158.10.0/23
IP: 151.158.36.0/23
IP: 151.158.42.0/23
IP: 151.158.54.0 -- 151.158.57.255
IP: 151.158.74.0/23
IP: 151.158.82.0 -- 151.158.85.255
IP: 151.158.92.0/23
IP: 151.158.106.0/23
IP: 151.158.132.0/23
IP: 151.158.150.0/23
IP: 151.158.176.0/24
IP: 151.158.183.0/24
IP: 151.158.186.0/23
IP: 151.158.202.0 -- 151.158.205.255
IP: 151.158.234.0/24
IP: 151.158.236.0/23
IP: 151.158.239.0 -- 151.158.241.255
IP: 151.158.250.0/24
IP: 212.117.48.0/20
IP: 2001:7fa:2::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22139 (0x567b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 12 13:13:31 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:48:c4:77:1f:a2:b3:25:74:08:6d:08:9e:
91:f2:a9:f9:af:a5:f6:43:50:14:de:8c:96:4c:42:
bf:e3:09:9d:08:0c:9b:9d:b6:3b:aa:24:73:76:78:
48:c6:7e:e5:6a:79:9a:66:3d:5d:90:4e:0c:3b:cb:
31:67:79:fb:d6:66:46:53:4e:97:5e:86:f5:23:e5:
94:5d:0a:dc:92:ee:8e:a4:f4:44:83:a7:ac:8d:86:
d2:92:5c:cd:f7:8d:f2:83:d9:65:fa:c9:4c:f4:2e:
71:2a:1b:1c:d0:b2:1e:82:fd:5c:52:7b:77:89:84:
3b:6a:55:67:17:4a:0c:e9:96:2d:1f:26:1d:9f:60:
06:96:fe:ae:03:0a:d6:d3:57:47:02:e3:24:65:53:
f1:14:52:76:75:3a:21:f3:2f:59:89:f1:7c:d7:3e:
03:09:b9:b7:6b:b8:35:bd:bf:12:c9:a8:7b:8c:5e:
3c:45:b1:da:6b:ee:23:14:03:66:f2:7d:0f:6e:0c:
9d:75:ba:08:b3:ec:18:98:93:31:1a:7f:ab:f8:e3:
ec:a7:ff:f8:87:14:0e:0b:05:01:c1:e9:a5:83:f4:
8a:ee:b4:82:e6:b1:cb:fa:dc:af:a7:df:3f:c0:e7:
04:c2:49:0b:e5:c0:00:a7:9e:13:af:66:76:fe:87:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56868
sbgp-ipAddrBlock: critical
IPv4:
82.158.128.0/19
85.137.28.0/23
141.229.2.0-141.229.5.255
141.229.8.0/23
141.229.24.0/23
151.158.4.0/23
151.158.10.0/23
151.158.36.0/23
151.158.42.0/23
151.158.54.0-151.158.57.255
151.158.74.0/23
151.158.82.0-151.158.85.255
151.158.92.0/23
151.158.106.0/23
151.158.132.0/23
151.158.150.0/23
151.158.176.0/24
151.158.183.0/24
151.158.186.0/23
151.158.202.0-151.158.205.255
151.158.234.0/24
151.158.236.0/23
151.158.239.0-151.158.241.255
151.158.250.0/24
212.117.48.0/20
IPv6:
2001:7fa:2::/48
Signature Algorithm: sha256WithRSAEncryption
75:03:10:82:4d:f6:e9:f6:83:f3:cb:f3:2d:dd:4c:72:4f:ed:
f6:f8:53:50:b9:38:3e:47:9f:d1:43:61:1b:e1:b4:8f:da:67:
65:c7:82:ad:82:58:bd:c4:9b:cd:54:88:61:52:f1:96:ef:1b:
55:ae:50:37:7e:ae:05:fa:8f:f1:aa:31:84:65:6b:c5:36:71:
64:e9:d1:ab:e4:b5:b6:bd:88:f5:b1:2c:9f:4b:f1:2d:55:e7:
51:9b:38:d9:29:e1:3b:98:63:f4:82:3a:02:09:8f:02:5b:62:
b6:d9:cd:57:c1:3f:30:be:30:4a:5c:5b:b2:8d:eb:63:e7:36:
75:8f:d7:be:ce:c4:f4:62:b1:d1:c7:26:3b:6a:7d:d9:51:4c:
f8:03:6b:72:dd:59:79:ef:b0:e5:ea:4e:e3:bb:a5:1e:10:13:
43:a8:18:a3:87:20:c4:59:11:b5:e5:74:db:26:e4:af:0b:cc:
97:ed:1c:54:31:b7:0f:1b:76:59:0e:72:16:98:b2:64:5e:93:
b8:e1:2e:25:5d:1f:cb:cb:ff:19:e1:db:d1:d2:52:84:54:41:
2f:32:4c:c2:e2:5f:7c:c3:0d:84:e3:39:14:94:06:44:8f:19:
08:77:e5:3d:9c:4a:7f:fb:3a:e6:7b:c7:8e:c8:9c:6d:5b:c3:
f5:43:d3:c1
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgICVnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYxMTEyMTMxMzMxWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4NjIxNDExMC8GA1UEBRMoREQ0OTMwRTNFNDJERkUzQkZGRjQ4MUIx
Nzk3NzBEMUFCMTU3NUJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOkQSMR3H6KzJXQIbQiekfKp+a+l9kNQFN6MlkxCv+MJnQgMm522O6okc3Z4SMZ+
5Wp5mmY9XZBODDvLMWd5+9ZmRlNOl16G9SPllF0K3JLujqT0RIOnrI2G0pJczfeN
8oPZZfrJTPQucSobHNCyHoL9XFJ7d4mEO2pVZxdKDOmWLR8mHZ9gBpb+rgMK1tNX
RwLjJGVT8RRSdnU6IfMvWYnxfNc+Awm5t2u4Nb2/Esmoe4xePEWx2mvuIxQDZvJ9
D24MnXW6CLPsGJiTMRp/q/jj7Kf/+IcUDgsFAcHppYP0iu60guaxy/rcr6ffP8Dn
BMJJC+XAAKeeE69mdv6Ha+0CAwEAAaOCA90wggPZMB0GA1UdDgQWBBTdSTDj5C3+
O//0gbF5dw0asVdbwzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvRDc4NTk5QkMzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg2MjE0L0Q3ODU5OUJDMzMxQTExRTRBRjJBQjM3Q0M0RjlBRTAyLzNVa3c0LVF0
X2p2XzlJR3hlWGNOR3JGWFc4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMA3iQwgewGCCsGAQUFBwEHAQH/BIHcMIHZMIHFBAIAATCBvgMEBVKegAME
AVWJHDAMAwQBjeUCAwQBjeUEAwQBjeUIAwQBjeUYAwQBl54EAwQBl54KAwQBl54k
AwQBl54qMAwDBAGXnjYDBAGXnjgDBAGXnkowDAMEAZeeUgMEAZeeVAMEAZeeXAME
AZeeagMEAZeehAMEAZeelgMEAJeesAMEAJeetwMEAZeeujAMAwQBl57KAwQBl57M
AwQAl57qAwQBl57sMAwDBACXnu8DBAGXnvADBACXnvoDBATUdTAwDwQCAAIwCQMH
ACABB/oAAjANBgkqhkiG9w0BAQsFAAOCAQEAdQMQgk326faD88vzLd1Mck/t9vhT
ULk4Pkef0UNhG+G0j9pnZceCrYJYvcSbzVSIYVLxlu8bVa5QN36uBfqP8aoxhGVr
xTZxZOnRq+S1tr2I9bEsn0vxLVXnUZs42SnhO5hj9II6AgmPAltittnNV8E/ML4w
Slxbso3rY+c2dY/Xvs7E9GKx0ccmO2p92VFM+ANrct1Zee+w5epO47ulHhATQ6gY
o4cgxFkRteV02ybkrwvMl+0cVDG3Dxt2WQ5yFpiyZF6TuOEuJV0fy8v/GeHb0dJS
hFRBLzJMwuJffMMNhOM5FJQGRI8ZCHflPZxKf/s65nvHjsicbVvD9UPTwQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:36 2026 by rpki-client