Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
File: qtagvMTbBX4UafHdswGbFlMwzkI.cer (raw, json)
Hash identifier: SGOcRnrt35RLUI7VbuI/yhuxPxNy/F7jKMgSGR7sIsc=
Subject key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 811F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Aug 2026 12:53:19 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33055 (0x811f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 22 12:53:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:22:6c:32:29:d6:c9:df:11:65:5c:80:fe:
14:43:44:fa:b7:18:0c:c1:18:f9:76:0e:b2:48:84:
70:7d:a8:b5:8b:48:79:e8:de:de:85:06:bc:72:46:
c3:97:df:ef:c6:47:27:64:ca:1c:6b:78:3e:2e:71:
16:d9:db:d3:e5:68:04:fb:86:76:53:73:9d:f6:9d:
51:35:43:2c:ec:2e:ce:1d:bc:66:b2:57:9a:a7:b6:
e6:51:f2:d0:8a:df:d4:6f:73:d0:ca:b1:8b:83:75:
ea:44:59:e3:0e:08:32:a9:98:ae:78:ad:56:00:2f:
bc:db:c4:de:ae:11:87:c3:50:b0:2f:04:25:42:ac:
b2:74:50:c9:43:fb:9c:fd:1a:9c:65:10:42:3e:a4:
23:86:9c:f8:fc:ba:a6:51:fd:9c:3f:c1:5f:8e:c2:
09:b5:8f:89:6d:14:a5:a8:34:83:15:49:22:93:c5:
f9:a0:cb:a6:f5:fb:f7:8e:b0:e9:e1:05:8c:66:22:
b3:2d:7c:b5:42:08:87:ac:13:fb:cd:0f:85:c2:3f:
af:3d:18:4b:04:c6:9b:a1:2d:53:25:cc:9f:19:b1:
7f:05:d6:b4:a9:78:54:ae:67:37:c7:94:1e:b9:b0:
8e:aa:4d:db:bc:dc:de:5a:3a:7f:39:b9:1e:1e:49:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.226.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:8a:9b:49:89:6f:d5:46:16:7f:bf:db:0b:e8:7a:61:38:ff:
1a:30:18:55:c0:f6:49:1b:b4:9b:13:fd:16:00:fb:cf:1c:d7:
1e:ef:0a:79:21:b0:0e:9e:e0:fa:7a:88:fc:b0:5a:89:5d:b9:
54:7b:c4:65:17:63:f5:a2:15:12:16:81:ef:a3:37:ce:d7:33:
1a:61:a1:3f:61:89:88:ba:41:9b:3d:3d:d2:75:0c:66:08:71:
1d:f7:1c:bb:08:22:99:6b:f6:40:cf:bc:3c:e4:bc:26:dd:75:
3e:fe:e6:8d:46:7b:c1:e5:18:33:f3:ed:ce:0d:47:47:5b:5c:
db:fc:f9:72:cd:e3:f7:d3:e1:fe:a8:36:b7:e0:eb:f2:04:d6:
88:33:8f:38:e5:46:2c:69:59:1f:85:60:89:61:db:57:e2:1b:
5c:25:b6:04:09:1d:db:32:e3:99:21:39:b1:4e:bf:25:37:84:
e5:3b:be:da:a7:2d:10:1c:df:ad:c5:1f:55:3b:29:8f:89:e2:
30:c5:e5:05:57:03:86:8a:76:15:5e:e1:42:2d:05:c0:a6:e0:
3b:13:d7:b0:6d:ad:a8:be:d7:3c:79:81:e1:d8:da:06:c2:0c:
a6:5e:35:31:93:48:4c:53:69:40:9d:57:73:bb:17:56:b6:d6:
ab:a1:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:34:10 2026 by rpki-client