Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.cer (raw, json)
Hash identifier: +79WcFP9KIZp7zcNSPyrHzZh+GaQ47PyPwdXJ64RJE8=
Subject key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D2BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 14:31:40 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.14.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185023 (0x2d2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 14:31:40 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:98:4c:95:c6:ea:dc:b8:c7:b5:3a:b6:b1:
f6:11:50:bd:69:90:1f:db:50:58:53:49:55:37:3e:
ca:77:bd:9b:86:3a:fd:32:d5:78:41:54:17:66:63:
69:8a:52:04:22:37:b4:ba:a5:a5:36:29:a7:cf:9c:
58:41:68:a4:7f:54:e8:b8:2e:f4:2a:d5:e4:f3:f1:
8b:f1:ba:80:4a:b7:9b:1d:d3:d2:ab:02:1e:0a:1d:
9c:d6:6e:66:e6:e2:83:48:33:1f:bd:2f:9e:67:d4:
90:39:d9:dc:31:e3:60:c5:08:7d:c3:76:46:e1:05:
96:12:7d:4f:1f:79:fc:b2:1a:4e:7f:98:97:2f:29:
57:08:d2:5a:60:09:7a:16:57:9c:7b:27:be:73:32:
19:f1:80:38:4a:17:84:87:76:c0:50:03:38:a7:f8:
51:eb:3d:43:98:46:d3:2a:39:00:58:9d:f9:c7:86:
6c:dc:b2:04:05:87:32:fa:96:9e:66:a3:08:30:a4:
b9:e7:63:24:60:c0:7c:f7:67:3f:d0:9c:28:c5:c9:
23:78:bb:60:b1:57:01:88:b2:9f:53:fd:d4:54:66:
ef:f9:e8:12:23:63:25:6b:9a:95:16:0a:25:ab:2c:
ec:9e:57:73:09:19:4d:08:e0:3f:aa:c1:f8:b8:1b:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
58:8b:46:ef:52:06:95:49:5d:cc:f6:dc:48:8c:28:68:58:2e:
ce:de:3f:a5:a4:08:6c:3c:61:d6:d9:3a:a3:1c:b9:53:7b:fc:
3a:6b:7e:bc:f5:86:21:5b:c6:91:fe:f3:09:f7:89:06:4a:62:
1c:9c:2a:a5:fa:a9:cc:02:ee:4d:7a:d1:9c:1d:36:33:35:57:
d6:36:72:ad:20:69:60:54:33:57:b1:46:18:4e:8e:99:17:c5:
f0:80:78:9d:cf:2a:31:1c:2f:a6:99:db:10:8c:c3:3f:8c:7a:
1b:65:e7:50:d0:fe:b8:70:c9:da:95:ec:7f:fd:a9:12:d6:99:
26:24:b0:18:51:ef:f1:6d:2b:9f:fa:3b:91:22:ce:59:60:5e:
1f:11:b4:8d:3b:91:f8:3a:ae:4b:af:79:c4:c8:cf:0e:bb:16:
c1:52:59:29:90:64:a2:8c:02:89:4c:8b:9c:5a:9e:a6:9f:61:
da:fc:ac:d6:73:a0:2b:fb:09:c9:35:3c:13:1b:4e:1d:31:cc:
90:fe:1d:8a:1c:55:08:d8:c9:d3:55:3d:e1:c0:a5:00:2d:f6:
e3:bb:a2:f5:4b:9f:4f:cf:00:28:32:37:74:38:ce:f9:88:81:
89:10:9e:4a:4f:b8:7e:e4:30:91:d6:e4:cd:89:89:16:80:d9:
e1:48:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:55 2026 by rpki-client