Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
File: QhgvX3GliYTOiFmuYKTKynP-g2E.cer (raw, json)
Hash identifier: /3SpHeV/YiD+n0c+lwEMar0NCVn9LBBhMYjilhDwU0w=
Subject key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02711A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Oct 2025 16:46:22 +0000
Certificate not after: Sun 01 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.99.168.0/24
IP: 2401:b140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 16:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160026 (0x2711a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 16:46:22 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:53:a5:03:81:3b:66:6a:16:72:43:d8:c2:
45:15:8a:bb:93:ff:fb:28:8d:ad:0c:2c:cf:c3:97:
e5:fb:f3:47:7e:4a:66:24:14:fe:5e:9e:ef:87:6e:
b1:b5:4e:fd:f2:37:3f:2b:52:38:52:26:9d:59:f9:
b6:34:65:da:e2:af:75:68:cd:fc:c5:d0:e8:f0:45:
ab:6b:f4:c3:d7:6e:29:43:a3:93:32:50:0f:2c:f0:
e9:5d:d6:b1:cc:01:2d:23:9e:74:dc:d5:eb:3b:02:
cb:eb:19:34:32:f9:3d:6e:24:83:ec:9e:98:29:ed:
1d:bc:24:92:15:22:73:00:1d:3e:30:68:e5:13:28:
ca:1d:25:09:fd:98:ff:92:53:71:06:2f:91:10:3e:
04:90:28:97:ad:e0:dc:b2:e8:0a:67:25:ee:ae:f4:
10:05:69:7b:16:6a:e6:0d:10:a2:e1:d5:1e:b3:a9:
d4:f7:98:3e:ed:30:fd:f7:d0:c3:cc:eb:30:06:8d:
4b:cd:2f:c6:f3:34:07:70:0e:07:b6:4a:cb:5b:18:
04:e9:37:01:2b:11:e5:25:fe:a4:c5:ac:5f:95:0b:
ad:9c:36:31:06:fd:bf:1b:a4:29:04:23:e7:59:eb:
c2:12:d4:f8:e4:30:c8:01:57:99:cb:80:51:39:ac:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.168.0/24
IPv6:
2401:b140::/32
Signature Algorithm: sha256WithRSAEncryption
3a:de:59:00:dc:b3:76:5b:4a:b0:d4:3a:b6:86:f7:05:79:f5:
21:12:f5:0c:29:94:60:7e:b7:8a:d8:45:4d:f2:9b:4d:a8:6e:
b2:29:f1:a3:f9:3a:e2:14:64:66:b5:f6:d5:c0:5d:6c:2d:a0:
88:a5:00:3c:84:6f:e4:19:11:8f:ad:d8:ed:31:71:83:89:f0:
ff:8f:4d:e5:ff:36:60:83:06:8e:23:21:f1:ed:67:01:89:35:
98:ad:99:bc:52:c1:4f:f3:19:9f:30:d0:e8:0f:6b:45:b8:d2:
8b:c4:44:9b:2c:76:2a:94:ef:9a:2b:ef:dc:36:3d:4d:27:cc:
01:ee:c9:84:72:b6:27:06:ca:56:26:fd:2d:7b:37:c6:fe:3f:
9c:c9:3c:8f:ec:0b:9d:f3:07:5f:18:70:0f:4d:b6:6b:b2:f0:
11:17:f1:81:b2:4e:2a:75:0b:ae:ff:68:a3:15:4d:44:9e:cb:
43:54:cf:e0:fb:6c:e8:01:02:1e:9f:8e:dd:92:f0:66:17:82:
e5:cf:b3:a0:05:e5:e1:d5:b6:4a:d5:ba:59:49:4b:4e:11:2c:
0f:99:ba:93:dd:91:cf:92:1d:00:a7:11:78:fc:92:2a:05:81:
ca:86:d7:be:93:e7:ab:08:fb:6d:ab:e9:f1:2d:f5:bd:9b:cc:
66:6b:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:05:10 2025 by rpki-client