Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer (raw, json)
Hash identifier: pSyX7ZrqGBeU7DwxlcDkarz4BuzZHsBkTrZS5/fKV50=
Subject key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8015
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 08:18:57 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.134.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32789 (0x8015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 08:18:57 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4c:6d:4a:8d:5d:57:91:f4:92:ab:8b:de:34:
58:ec:4b:79:21:1a:7a:d6:4f:a7:dd:88:05:c7:d7:
4c:e3:c0:07:06:2e:f2:d0:4b:1a:d7:52:3f:78:a9:
0c:28:68:5d:6b:88:8c:59:46:6b:de:5a:56:b5:e3:
5b:c9:9e:9e:47:0f:7f:68:7c:9a:e1:ac:29:a5:a2:
94:c7:2e:9d:4c:d2:5f:a5:bc:ec:02:0d:5c:0d:f0:
aa:cc:56:53:12:38:f1:8c:a7:d6:bd:21:a2:f7:24:
dc:31:f1:27:05:b0:bc:11:dc:35:2b:bd:4a:b3:b8:
e9:02:82:ca:d0:ec:34:d8:cf:9e:46:28:f6:11:ec:
da:c0:2d:51:a7:29:4c:3d:84:0f:9c:f7:19:55:b0:
32:b4:14:1e:60:e2:14:55:e2:f6:c8:ce:bf:7c:f2:
d8:ec:90:54:df:7b:40:4c:a8:01:ba:07:79:5f:4c:
e0:7c:1d:54:be:1f:93:45:8a:32:2f:15:c7:8b:07:
e6:00:9c:1e:41:99:5c:04:b9:ba:8c:b2:5a:70:43:
d0:a5:9b:30:3b:6d:7b:c7:c5:d3:a2:07:a6:88:df:
4c:9b:8a:ff:5a:97:35:d3:d6:01:40:91:fd:76:ac:
fb:23:9b:94:ed:81:8a:d7:99:1d:51:9e:bf:ab:b8:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.134.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:67:a9:ac:91:21:96:e3:02:9d:0e:ed:7e:4c:62:29:17:db:
32:bc:85:8a:ec:9b:53:50:62:3e:aa:e6:91:b4:93:ab:3e:bf:
a3:d5:58:78:5a:af:37:e0:97:6d:eb:43:1c:4c:e8:7c:75:b3:
ba:0d:4e:fe:b8:32:cc:e1:a7:f4:34:98:48:a9:1a:59:b1:a6:
1f:39:85:7b:72:76:a6:a4:da:bc:7d:e2:7e:4a:05:f8:e7:ba:
ba:48:4f:3b:75:79:be:af:97:41:9f:a3:d2:46:3a:81:af:05:
8f:e9:15:7c:b7:02:28:24:5e:37:1a:db:93:65:d9:53:e7:a5:
68:5a:4d:1b:2d:36:fe:70:5c:ae:5d:98:7e:72:ad:ce:85:c0:
59:fa:02:88:ba:74:f3:30:09:6b:bd:5c:e6:ce:32:64:62:e3:
c4:33:66:52:9b:42:d7:41:59:80:82:93:38:98:5f:ca:02:e3:
c4:b0:8b:ab:3d:d3:69:b3:7c:d2:56:c7:a7:9c:0e:a5:27:ea:
3b:40:2f:38:20:cc:b7:34:3e:aa:c9:59:c4:4f:20:40:8f:f4:
e8:b8:bd:4e:18:db:05:2c:61:9c:97:ac:20:d2:37:cc:24:5e:
0c:8a:dd:79:cb:e9:33:81:77:b5:b6:d3:7e:6b:db:a0:58:4c:
de:dd:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:05:42 2026 by rpki-client