Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer (raw, json)
Hash identifier: d0LXToSEESEalDNU6OOOaq6HMHrnCMzx2Cn5IBcWfys=
Subject key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 830A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 07:49:51 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.187.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33546 (0x830a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 07:49:51 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:3e:34:3f:15:2e:71:5c:35:e4:f1:4b:84:
62:cf:35:1b:79:6a:5a:53:86:cb:2e:3d:06:5d:2e:
de:00:e8:00:e8:14:37:19:a2:62:93:e8:ba:61:bd:
11:71:0f:c6:55:cd:20:56:47:d5:1a:fe:63:ee:89:
5d:64:a4:4b:69:4d:c8:83:ac:84:a9:d5:03:3b:46:
f9:5a:cf:a5:04:8f:9d:d1:69:77:5f:44:a5:18:62:
c4:16:ac:a7:84:0c:d6:6d:ac:bf:00:76:ba:85:b5:
86:23:3b:b0:40:34:1e:e9:da:69:2a:ca:02:ae:b2:
c1:36:e3:b2:d4:31:73:8c:86:08:40:fd:31:53:d4:
08:f4:2c:23:62:e6:1c:61:a1:bf:b7:c3:b8:72:24:
86:0f:5e:20:a4:19:fc:e4:09:9f:5f:ce:1d:1b:fc:
f6:70:9c:36:c5:41:29:8e:f0:9f:52:49:bc:7a:61:
f7:c4:2b:e9:7b:26:5e:e7:68:ac:e4:16:6d:32:eb:
7d:c5:13:d7:8f:50:ce:ab:73:ba:a4:b2:61:21:56:
3f:40:5d:8c:c2:33:d0:2b:c0:f5:3f:20:2c:a1:0f:
0a:22:0a:fd:08:ba:c0:72:47:a0:95:07:92:6a:98:
36:2d:12:6d:5d:d7:01:c4:72:97:31:4f:77:53:21:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:df:2a:f2:51:10:de:88:d4:08:0d:44:cd:1f:f0:11:f6:4d:
0f:e8:7b:b7:81:51:9b:22:08:8d:b6:e5:30:ec:69:bf:89:a4:
3f:53:7a:7a:01:af:a4:69:ea:54:cd:f3:a1:34:cb:ec:df:4d:
ac:c3:46:2e:c3:9b:0b:b0:4e:9d:ae:ad:8b:f7:85:5c:de:f0:
c7:17:23:45:52:11:c3:e4:17:cb:98:e3:91:fc:a3:ae:b6:f2:
bb:a3:5f:81:29:d2:ce:b5:de:85:76:a9:07:c1:2a:8b:25:02:
98:f1:5f:be:2b:d3:6c:70:0f:17:3e:29:71:48:45:b4:69:0a:
13:15:3d:d2:15:bb:e2:64:08:99:a1:01:a8:b6:6f:be:34:32:
69:ea:48:d3:fe:0a:3b:3d:92:0d:cb:ea:87:6a:05:d3:87:9f:
d9:bf:fd:1b:88:57:cf:3d:5a:e0:a6:47:7d:5f:bb:c0:f0:c3:
a5:05:82:5f:bd:43:88:05:f8:4e:1b:a9:03:99:fc:28:a3:db:
4d:08:ca:2c:b6:65:b3:78:e6:82:49:a9:2a:51:7e:c8:52:56:
23:42:f4:f2:e9:25:87:2d:fb:a5:eb:60:96:22:82:9a:c1:0c:
d0:a5:ed:9d:04:00:da:78:86:27:03:b0:42:05:ac:40:97:6e:
86:05:53:73
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIMKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAwMTA3NDk1MVoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTA1ODcxMTAvBgNVBAUTKEE5QjUzRjdCNjE5NjMxODcwOTI4OTAy
RkY0ODQ3NjU3NDFCREEyRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIZz40PxUucVw15PFLhGLPNRt5alpThssuPQZdLt4A6ADoFDcZomKT6LphvRFx
D8ZVzSBWR9Ua/mPuiV1kpEtpTciDrISp1QM7Rvlaz6UEj53RaXdfRKUYYsQWrKeE
DNZtrL8AdrqFtYYjO7BANB7p2mkqygKussE247LUMXOMhghA/TFT1Aj0LCNi5hxh
ob+3w7hyJIYPXiCkGfzkCZ9fzh0b/PZwnDbFQSmO8J9SSbx6YffEK+l7Jl7naKzk
Fm0y633FE9ePUM6rc7qksmEhVj9AXYzCM9ArwPU/ICyhDwoiCv0IusByR6CVB5Jq
mDYtEm1d1wHEcpcxT3dTITaTAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUqbU/e2GW
MYcJKJAv9IR2V0G9oukwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkwNTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MDU4Ny85MEYxNDM1QTYyMTgxMUYwQUEyMkEwMjZDNEY5QUUwMi9xYlVfZTJH
V01ZY0pLSkF2OUlSMlYwRzlvdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAClZbswDQYJKoZIhvcNAQELBQADggEBAHvfKvJREN6I1AgNRM0f
8BH2TQ/oe7eBUZsiCI225TDsab+JpD9TenoBr6Rp6lTN86E0y+zfTazDRi7Dmwuw
Tp2urYv3hVze8McXI0VSEcPkF8uY45H8o6628rujX4Ep0s613oV2qQfBKoslApjx
X74r02xwDxc+KXFIRbRpChMVPdIVu+JkCJmhAai2b740MmnqSNP+Cjs9kg3L6odq
BdOHn9m//RuIV889WuCmR31fu8Dww6UFgl+9Q4gF+E4bqQOZ/Cij200Iyiy2ZbN4
5oJJqSpRfshSViNC9PLpJYct+6XrYJYigprBDNCl7Z0EANp4hicDsEIFrECXboYF
U3M=
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:27:27 2026 by rpki-client