Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
File: QOkwK3XF6hkj6n9pWOKvQQhlr44.cer (raw, json)
Hash identifier: 2j5H2Oa0LVWHUruAxp14qsGiMV84AfVHSHlDJAdhxvI=
Subject key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 04:29:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154525
IP: 2001:df6:c6c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172481 (0x2a1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 04:29:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:b7:27:12:53:3a:50:4d:99:d2:84:37:cb:
f3:25:55:f5:bd:b8:43:e6:c3:88:3d:a2:7d:62:09:
ae:e6:6d:e8:5d:dd:9b:e0:c8:6f:d8:e7:49:34:2c:
39:b3:94:d0:d7:1f:e4:57:53:74:dd:11:42:4d:c2:
2f:1a:b5:ee:9d:43:73:f0:4a:9b:b3:8f:8f:94:28:
d4:44:f8:6b:10:28:e4:c1:08:54:46:0d:ed:00:d9:
71:be:ba:24:e1:c6:8e:b1:52:ef:a2:53:20:d8:f5:
24:21:e9:ae:72:cf:e3:e6:59:55:19:c4:d4:5e:07:
e8:e0:29:1f:fc:6f:f2:6a:2a:a5:8f:a9:2c:12:ef:
f3:05:1e:ad:13:a3:ab:cd:88:37:b1:f1:65:ca:aa:
43:63:08:f9:77:68:3d:ec:a4:b3:d5:a8:17:79:63:
d3:06:76:1a:8c:db:06:12:b1:f4:76:0f:59:50:a4:
2a:14:a3:e5:0f:12:f0:b0:50:c3:08:a9:20:31:34:
46:4e:ae:04:41:4d:69:3a:3b:11:6c:bd:1b:11:0c:
32:7d:64:67:64:74:60:ff:50:1b:48:ec:ee:ca:0a:
a4:dd:df:99:ae:b6:d4:a3:47:25:e5:6f:9c:e0:34:
16:5b:87:90:00:62:40:14:f6:d7:14:63:03:b2:b3:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154525
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:c6c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:8c:49:de:a7:b0:33:f4:34:b2:ab:34:69:28:82:5b:73:cc:
95:19:da:1e:38:46:d9:7f:40:bd:a0:5e:90:c7:02:cf:41:cd:
8d:f6:43:aa:3f:b9:39:37:d9:8b:ff:c0:c0:b2:e6:2b:41:3a:
b5:ed:48:50:9a:8d:c6:01:a7:8f:ba:51:ce:8f:05:48:5c:c2:
12:17:e8:73:29:d3:b5:ab:0a:2d:10:a8:d1:82:1f:07:82:c1:
d7:1e:ca:08:c8:5e:3f:04:a8:c6:a5:67:06:2b:d5:16:72:76:
21:9f:7e:7d:03:8f:59:04:b2:50:7c:2b:61:34:cf:83:fc:49:
8a:05:f3:98:70:6b:68:6c:f5:d8:14:e5:38:f3:5a:9c:57:cf:
ca:e2:82:7d:a3:58:68:fa:ba:04:0b:3d:e1:91:a7:22:b9:14:
b2:db:89:b4:9d:cf:ae:75:25:8a:bc:d6:9b:f7:e1:65:49:24:
76:1d:6a:89:cd:94:2b:2d:6f:30:d1:e0:ba:65:13:b1:48:d1:
57:6f:24:df:d7:83:d6:cf:60:53:51:fa:54:54:19:75:f4:2d:
16:2f:dc:e4:a9:49:db:eb:16:53:50:1f:b7:98:f6:6a:fa:a5:
91:a9:44:ad:91:00:01:4c:b3:b5:42:1d:ad:0b:ce:5f:3c:f4:
24:00:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:13:34 2026 by rpki-client