Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
File: m8SNrBAOdU7o4cpqupQk4z013mo.cer (raw, json)
Hash identifier: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=
Subject key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4AAE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jun 2026 23:13:46 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 177.210.0.0/15
IP: 179.252.64.0/20
IP: 179.254.0.0/20
IP: 186.241.32.0/19
IP: 186.241.144.0/20
IP: 186.242.224.0/19
IP: 186.244.0.0/20
IP: 186.244.32.0 -- 186.244.95.255
IP: 186.247.112.0/20
IP: 186.247.144.0/20
IP: 187.5.160.0/20
IP: 187.14.0.0/19
IP: 187.40.96.0/19
IP: 189.49.0.0/18
IP: 189.72.224.0/20
IP: 189.73.64.0/19
IP: 189.73.160.0/19
IP: 189.73.208.0/20
IP: 189.74.32.0 -- 189.74.79.255
IP: 189.74.192.0/19
IP: 189.75.240.0/20
IP: 191.214.0.0/16
IP: 191.217.64.0/20
IP: 191.218.192.0/18
IP: 191.219.32.0/19
IP: 191.219.96.0/19
IP: 191.219.160.0/20
IP: 191.223.96.0/19
IP: 191.223.240.0/20
IP: 200.97.192.0/18
IP: 200.102.208.0 -- 200.102.239.255
IP: 200.103.80.0/20
IP: 200.103.160.0/20
IP: 200.103.192.0/19
IP: 200.219.64.0/20
IP: 200.219.96.0/19
IP: 200.222.160.0/19
IP: 200.234.16.0/20
IP: 201.5.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19118 (0x4aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Jun 22 23:13:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:34:fb:16:8c:cb:ed:05:df:4a:8e:80:a4:
a4:fd:e3:00:f9:95:5f:1e:46:bd:48:60:3a:f3:cd:
bc:5c:c4:07:8b:48:8c:6c:e2:51:18:21:1e:51:e9:
c8:1d:31:dc:44:1c:ce:cc:e1:e3:15:93:d8:f6:dc:
4f:02:21:d5:ca:35:9f:c8:77:e1:d7:b3:05:fa:f6:
77:90:fe:0d:53:af:1b:83:7f:3d:98:1b:d6:e6:9f:
99:43:0a:73:34:1b:f4:b5:2b:22:e4:cf:ec:7a:72:
34:0d:26:8d:9c:5e:b9:03:f5:a5:c6:fe:88:37:64:
a6:6d:26:2b:63:88:40:b5:7f:5d:dd:91:88:d8:26:
b2:50:8e:81:d7:97:5d:ef:78:c1:c7:bf:35:df:60:
b8:2b:14:16:2e:42:6c:2d:4b:0c:c3:89:39:5a:9e:
d5:99:9f:92:88:41:34:85:50:6b:e3:2f:44:f6:c1:
9d:dd:e5:0f:a7:ed:43:f8:1d:64:fd:c8:40:3a:c5:
99:1a:ef:32:80:77:a3:9a:a1:96:bb:c4:4a:22:99:
4b:d9:30:e1:a9:4b:5d:3c:74:7c:6b:76:7b:63:53:
f0:e2:80:6b:98:b3:80:fb:09:dd:39:b8:69:c6:12:
b7:6f:67:0a:ac:49:b8:b0:99:a8:6d:60:f5:66:19:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.214.0.0/16
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:20:3a:e7:d4:d8:40:da:f5:93:e3:c9:9f:8c:39:ee:05:43:
5f:ab:5f:08:ea:ea:a9:06:b3:9c:ec:e8:6f:56:ca:3a:d9:9e:
96:9b:d3:45:76:35:36:82:f4:4e:e9:09:d4:34:a6:91:b5:75:
cf:1e:39:a3:dd:bc:89:84:cb:68:dc:1d:6a:0c:3f:14:79:90:
77:55:0e:fd:dd:56:1b:e7:14:5d:59:9b:0f:08:41:80:9f:c3:
33:11:e0:fb:49:98:fc:db:c3:56:20:03:76:65:f1:3a:4b:57:
a6:c6:02:8a:0a:7f:b6:c0:3b:c3:d8:70:95:06:ba:f1:7b:2b:
73:fc:7e:c5:76:29:d3:ef:24:69:0c:ce:e7:f2:ea:e2:7e:1c:
2a:92:68:86:e4:f4:3a:fa:98:24:fa:54:f6:fa:6c:dd:f2:37:
e8:97:ee:6c:12:f9:64:bc:d8:f1:c9:71:50:6b:5b:b3:01:e0:
9a:53:9f:34:cd:25:e1:cf:86:ec:89:7b:bc:7f:42:b7:ce:aa:
e3:15:d3:0d:35:34:d9:c2:96:99:5d:be:e9:de:80:65:3c:e2:
81:a7:87:5d:1c:1f:6f:6b:75:f6:94:cb:0e:e0:f1:50:a0:97:
c8:6d:c4:34:0a:fe:5e:1d:eb:25:84:d6:e0:31:9c:5c:a0:05:
1e:f7:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:38 2026 by rpki-client