Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
File: QhgvX3GliYTOiFmuYKTKynP-g2E.cer (raw, json)
Hash identifier: K4pSwDPcWcLc7lXURpyxZJGLVyPb9DZiPCEj8tsxz20=
Subject key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DBF2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2026 13:02:50 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.99.168.0/24
IP: 2401:b140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187378 (0x2dbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 5 13:02:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:53:a5:03:81:3b:66:6a:16:72:43:d8:c2:
45:15:8a:bb:93:ff:fb:28:8d:ad:0c:2c:cf:c3:97:
e5:fb:f3:47:7e:4a:66:24:14:fe:5e:9e:ef:87:6e:
b1:b5:4e:fd:f2:37:3f:2b:52:38:52:26:9d:59:f9:
b6:34:65:da:e2:af:75:68:cd:fc:c5:d0:e8:f0:45:
ab:6b:f4:c3:d7:6e:29:43:a3:93:32:50:0f:2c:f0:
e9:5d:d6:b1:cc:01:2d:23:9e:74:dc:d5:eb:3b:02:
cb:eb:19:34:32:f9:3d:6e:24:83:ec:9e:98:29:ed:
1d:bc:24:92:15:22:73:00:1d:3e:30:68:e5:13:28:
ca:1d:25:09:fd:98:ff:92:53:71:06:2f:91:10:3e:
04:90:28:97:ad:e0:dc:b2:e8:0a:67:25:ee:ae:f4:
10:05:69:7b:16:6a:e6:0d:10:a2:e1:d5:1e:b3:a9:
d4:f7:98:3e:ed:30:fd:f7:d0:c3:cc:eb:30:06:8d:
4b:cd:2f:c6:f3:34:07:70:0e:07:b6:4a:cb:5b:18:
04:e9:37:01:2b:11:e5:25:fe:a4:c5:ac:5f:95:0b:
ad:9c:36:31:06:fd:bf:1b:a4:29:04:23:e7:59:eb:
c2:12:d4:f8:e4:30:c8:01:57:99:cb:80:51:39:ac:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.168.0/24
IPv6:
2401:b140::/32
Signature Algorithm: sha256WithRSAEncryption
d8:49:42:ee:27:6a:87:d5:ea:e6:d1:de:f6:10:e3:15:82:8e:
14:7a:57:b3:5e:66:6f:69:e7:a6:1e:d7:dd:c1:57:7e:57:db:
41:7c:58:bd:ce:45:52:7f:22:c4:a8:bf:86:db:ed:c8:45:b0:
35:37:85:28:ac:3f:20:7e:83:36:32:b8:36:d0:da:e8:c1:fd:
dc:c9:b5:84:25:c5:bd:86:26:a6:07:86:f7:62:8b:0d:1e:2b:
1b:3e:13:1f:8c:fd:b9:ef:8a:d7:c5:9c:ab:0d:cd:59:c5:ba:
32:e3:f8:3d:b8:12:e1:c0:b4:ca:be:82:fb:3f:e4:78:b9:9c:
bb:ff:a4:a2:dd:e8:72:00:bf:34:51:b3:dc:53:2e:39:2c:23:
67:0d:c4:4d:bf:9e:57:e3:89:a8:4a:bb:05:04:63:26:6d:b8:
e6:09:5a:0e:66:af:30:31:ee:e5:88:b5:cc:44:0a:2f:48:be:
cf:b7:9d:1e:6b:b9:12:58:8b:d1:ec:58:06:e2:9d:32:c7:b1:
e8:97:d2:d3:6f:35:cd:19:fb:84:72:24:e4:cf:c4:9a:46:f0:
39:6a:07:87:df:6e:a2:b1:13:01:f6:c8:31:ab:f4:ed:4f:95:
98:5b:ac:6a:f8:e0:45:85:c3:8f:a6:20:69:a9:a7:cb:39:ac:
2b:38:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:55:10 2026 by rpki-client