Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
File: peb1x0u860AJxV7qaJcDSZcf9jo.cer (raw, json)
Hash identifier: TlQPb0ujaldMwRgOj74Nbna1PO84R4BQzdIJQSe1Gj8=
Subject key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8299
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Sep 2026 00:55:39 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 149.234.186.0/24
IP: 149.234.191.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33433 (0x8299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 23 00:55:39 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:2c:aa:39:d1:47:d8:d1:f1:bb:dc:b0:58:
0a:2e:c8:9c:13:8b:e1:c5:c0:df:83:61:ff:a5:c9:
57:4c:77:92:3d:a6:22:e0:cc:1b:f3:ce:c1:d5:89:
7a:2a:27:f2:b3:36:99:13:0b:a3:bd:5f:03:9d:82:
c2:f3:17:aa:5d:d9:29:2c:38:9c:97:a3:65:8b:47:
a3:d9:f3:16:93:3e:b5:bb:9b:65:79:94:52:e4:d7:
07:11:e9:cc:3f:b7:38:55:b6:84:66:95:db:c6:b9:
ac:88:f3:89:97:bb:af:f1:ae:73:5f:de:98:81:ae:
74:97:81:53:ea:4b:a1:64:83:4c:af:a4:7d:86:46:
88:d4:ab:9a:14:dc:55:17:6f:fd:f8:ee:59:12:d2:
c5:f2:48:62:10:e9:22:1c:6b:88:f9:81:5a:e7:f1:
e4:24:ee:b9:b5:80:62:b4:f2:8c:33:ab:cd:03:91:
f5:d6:dd:b5:da:65:2d:67:e7:72:43:39:79:bb:7b:
7d:fe:6d:78:32:0a:7e:83:33:ef:2a:7d:c9:a5:0f:
db:92:2a:13:0e:52:7b:86:36:85:cb:6f:c8:28:62:
73:c0:e9:e9:d5:d4:1b:ec:76:e8:86:ab:f8:2f:a8:
e1:68:9a:2c:6b:20:13:11:38:41:c7:5b:50:1e:ec:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.186.0/24
149.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
81:99:c6:60:a9:95:bf:7c:ca:38:ce:f9:11:c5:3a:de:ae:b1:
61:45:bc:61:49:2a:df:c7:9d:ac:d1:6a:ff:7c:68:89:5a:2d:
69:e0:78:ad:29:d1:b1:c5:de:29:65:e7:9f:1d:08:2d:3c:23:
6f:5c:f0:c8:7f:86:dc:84:47:e2:e6:f3:10:79:a9:73:2b:69:
6b:20:7e:1d:79:4d:d5:8c:50:cd:94:94:ff:b7:6d:09:6a:24:
5e:6a:89:e8:1e:c9:a9:71:a9:11:ba:94:17:af:bb:a5:6f:6d:
ac:e2:45:8c:d9:e7:fc:3a:d2:0d:43:f2:33:c5:5f:e4:09:31:
b6:86:24:16:54:d1:05:a5:08:66:5f:c9:cd:1e:10:d8:b6:a9:
7d:78:f8:f5:dc:f2:df:a6:0d:ad:03:7b:ad:24:90:ac:91:79:
66:f8:70:ff:4c:3c:ce:14:8c:3b:20:23:8a:a3:ef:ee:0b:50:
4e:7d:24:93:a7:49:ac:53:e8:6c:0d:a3:db:9f:74:fa:9e:1f:
85:92:fb:ce:b6:4f:93:2f:f9:82:5e:6a:51:f8:55:de:19:41:
c8:8c:c0:f4:df:b5:48:8a:4e:38:59:ec:8e:4e:5d:25:2f:ae:
b6:1d:66:17:ed:aa:68:38:a8:0a:4b:8d:4f:95:a3:66:a2:93:
fd:5f:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:29 2026 by rpki-client