Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
File: AS8QgccGdx-n-iNDsinDDgorY3A.cer (raw, json)
Hash identifier: +6UVeCLsrv3iZETBMj4ZAT51Y7+XtJ5YDafaFthCs+0=
Subject key identifier: 01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BE55
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Jun 2026 23:23:10 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.68.188.0/22
IP: 103.147.48.0/23
IP: 203.27.19.0/24
IP: 2405:a9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 23:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179797 (0x2be55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 18 23:23:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F77AD, serialNumber=012F1081C706771FA7FA2343B229C30E0A2B6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:c6:89:11:72:73:0b:f2:8c:11:ae:5b:de:
e3:29:38:0c:6f:02:07:94:d0:33:95:4c:06:04:5e:
ad:e9:89:40:d2:d2:05:79:62:3a:3b:1f:7b:71:ec:
c2:09:10:a0:b7:d0:e1:de:bc:10:38:20:6d:e4:bb:
d2:91:94:77:f3:2d:24:3e:17:da:33:e7:11:9e:bc:
66:e6:ec:21:de:aa:f2:26:0c:c2:72:64:e2:11:af:
4a:58:91:2f:3a:7c:05:9a:55:8e:cb:ea:26:4e:31:
dd:82:76:d4:5d:b0:98:a1:93:d7:47:0f:d4:31:17:
6d:6f:d9:59:53:6f:2f:db:12:6d:71:9d:71:1b:8b:
98:60:e5:51:86:68:9f:34:1b:0b:21:ee:b4:ad:3e:
4d:e6:88:aa:ab:a2:6c:f2:ec:8a:14:92:f2:b1:1c:
6a:bb:68:52:9b:4a:f0:68:f1:f3:60:cc:24:f5:e7:
c9:19:9c:19:94:dc:b3:b7:b2:a6:37:08:83:22:27:
26:f1:1f:95:f4:48:08:f3:aa:91:59:96:0b:96:b1:
d1:58:62:90:b0:84:b8:c5:6b:22:d7:3b:47:00:e9:
13:e7:98:c9:2c:73:ab:e8:7a:75:2e:40:13:fc:7b:
e4:56:d3:56:6d:ab:c0:11:09:30:5e:e4:3a:4b:72:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.188.0/22
103.147.48.0/23
203.27.19.0/24
IPv6:
2405:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:68:6c:bc:40:f1:a9:41:3c:b8:bc:de:d8:81:37:fe:11:0d:
52:0c:4b:d4:f4:f0:c2:d5:44:e4:df:b9:3f:68:e3:dc:a5:f7:
d0:04:57:a0:87:96:72:fa:52:6e:ce:e9:24:43:55:75:d4:2f:
f4:41:e1:b4:4c:01:ae:e8:78:40:91:f5:29:69:09:d3:01:ff:
a3:37:ef:4c:b8:fe:34:62:14:9f:2d:c9:60:10:df:14:19:bd:
b7:b3:db:8b:92:04:c0:41:4c:01:fc:10:d0:a1:fe:08:6d:cc:
a6:52:6e:cc:75:ce:9e:fd:23:a2:a9:88:7a:24:a5:91:ce:bd:
ee:4a:b4:1e:aa:42:bd:61:5c:d3:cf:bf:47:56:86:74:fc:c7:
f1:4b:0b:0c:21:bf:7e:8d:0b:ee:c9:91:11:82:9e:04:cf:9f:
f7:1b:26:f6:37:2f:9a:2d:85:7d:99:34:05:7c:a9:a5:47:5c:
77:e7:20:18:5b:27:3c:ba:c3:0c:e0:40:06:7a:e2:84:7a:d9:
4e:bd:58:01:08:3b:e8:e2:4d:99:30:29:34:86:31:32:d9:e0:
87:32:10:d2:4a:76:21:45:09:6b:1a:a3:50:9b:70:55:39:9b:
99:ee:7b:31:c9:cd:90:84:32:c2:b9:49:3f:dc:f6:16:39:a4:
7b:ca:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:25 2026 by rpki-client