Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer (raw, json)
Hash identifier: 4vqZLoBSITJZWvH/uV38WnuuyGOt3HqpsT+DFKT2HI8=
Subject key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 13:06:44 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 160.20.116.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32970 (0x80ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 13:06:44 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:95:90:2f:17:f0:8c:5b:e2:e3:5a:ac:bf:
77:18:5a:ad:4e:35:89:9a:20:05:fd:f5:a4:35:db:
c0:36:57:1e:ff:e4:2b:31:56:d6:57:56:9e:c0:d6:
d3:71:86:d1:2f:f7:3d:e9:15:91:69:9f:4f:e3:f7:
01:41:e5:5b:5a:10:16:a0:9f:c5:18:b6:37:8f:66:
ce:24:b4:0f:fa:4e:ed:2b:d6:38:b3:8b:86:cc:51:
ff:fd:35:19:60:67:b2:6f:55:cd:e4:74:c9:ae:8f:
c9:a1:17:e7:e9:5f:9e:0b:ac:00:b2:f1:77:92:4c:
7e:82:3b:1c:f3:b1:bf:aa:30:d9:90:f9:3b:e7:b6:
d1:e5:89:50:d2:0f:a3:c3:17:9f:53:1c:1c:06:17:
44:b7:49:ad:ac:49:26:da:7c:b0:b2:76:e6:da:b6:
b9:0d:c5:15:fb:61:59:69:64:92:b7:9f:37:be:cf:
26:1f:c8:1f:39:f0:99:09:71:37:36:c6:be:b0:ca:
ad:3b:e3:b2:e3:dc:b0:60:c4:d3:1c:34:c9:d6:70:
c6:f2:f4:0f:1b:80:26:af:be:a3:95:5d:53:44:53:
ad:af:99:81:e0:85:10:fc:20:07:53:af:e1:89:d4:
62:9c:97:19:de:b0:ff:c6:49:c3:0a:de:09:a8:5a:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.116.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c8:c6:85:80:29:03:6e:2a:bf:d4:4c:39:83:ec:39:59:55:
0e:1b:3b:da:10:15:48:29:d0:fc:ef:ab:71:23:71:8a:f4:3c:
8e:4b:cb:e2:0e:f9:a7:42:87:4a:fc:69:ca:6d:79:7c:fe:99:
d5:3a:a4:c5:e5:2d:eb:95:99:a6:29:3c:80:28:f2:32:ba:7e:
14:a2:ff:79:60:fd:db:c8:c3:54:c6:ed:da:4f:ef:f4:90:c3:
07:7c:76:39:e6:6f:49:22:e2:83:ee:b9:63:26:03:f7:cd:a7:
e5:9a:ba:d5:6e:cb:c5:ee:e6:ee:90:cf:f0:f1:84:10:e5:ae:
d3:8b:06:f8:78:e7:25:52:bd:e2:c9:a8:af:6d:d6:e1:25:cd:
2b:80:01:24:0e:6f:11:d3:25:6c:ba:a2:ae:b1:ed:ff:76:64:
2d:fb:43:16:cf:52:38:f0:7f:aa:64:7b:5f:c9:15:7b:f9:f5:
23:69:bc:51:53:b7:a3:2c:0c:aa:bb:e5:85:82:bd:7d:fc:c5:
8d:31:75:48:f6:4c:8d:98:d2:74:3e:12:b2:09:c6:5c:a9:5a:
c0:58:e0:c6:b3:38:b2:cb:2a:e4:b6:ac:d3:94:59:94:9e:23:
fd:19:3e:1f:d4:69:21:f2:2a:a0:a4:fd:e6:6a:26:57:c1:26:
47:bd:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:15:41 2026 by rpki-client