Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
File: QwISXvsUnkUVYMdJW31DzZ6az_c.cer (raw, json)
Hash identifier: quqng/Q0X3j6ysb3UEPcziibOC2DQpw0NPgAbO3kQvU=
Subject key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0270BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Oct 2025 21:55:43 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 137236
AS: 139258
IP: 43.226.12.0/22
IP: 103.101.80.0/22
IP: 202.8.72.0/22
IP: 2401:ccc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 16:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159933 (0x270bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 21:55:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:1b:e3:59:fb:3b:24:61:23:fd:87:1e:24:
e2:47:18:67:8e:d2:1c:0c:aa:9e:7a:d6:94:22:c9:
58:e8:f6:5b:ec:a5:1c:4e:72:e0:28:ca:ba:14:3d:
61:b1:89:b4:cd:a4:36:ed:b3:b4:10:6c:d2:f7:c4:
b4:d2:59:6e:00:2a:85:d5:19:17:0a:5b:ed:96:79:
1b:75:7f:71:3b:49:a3:ad:1a:ef:2d:6e:24:bc:fa:
02:03:09:d7:fb:9c:88:5d:68:6b:34:2b:e2:72:b8:
8c:8f:84:48:25:b8:cb:06:74:d3:84:e5:0a:5a:73:
4b:6b:7b:4d:e8:e4:15:9b:a7:ea:64:07:21:1d:76:
83:b2:b8:64:7c:d6:ed:d0:56:31:e3:7e:78:0e:72:
13:48:68:c6:70:7b:ae:b5:c3:94:ac:97:be:c6:4e:
69:c7:92:29:c2:b1:04:14:f1:a2:28:ea:d0:c2:9b:
98:8f:92:6f:86:8f:cf:b4:3c:c3:b6:0b:8c:97:45:
f9:32:38:ba:fc:20:a1:d9:ad:3b:7a:b5:43:3e:d6:
28:e8:d5:68:9b:8f:26:c0:2c:05:1c:4a:23:3b:e6:
ee:4b:2f:06:22:32:22:97:13:92:ec:ee:b9:79:b0:
64:ff:0c:11:d9:38:48:9d:cd:54:88:a4:65:14:d4:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137236
139258
sbgp-ipAddrBlock: critical
IPv4:
43.226.12.0/22
103.101.80.0/22
202.8.72.0/22
IPv6:
2401:ccc0::/32
Signature Algorithm: sha256WithRSAEncryption
37:c3:e7:cd:cb:b6:f4:4e:11:1b:39:2a:c1:3c:15:e0:e8:eb:
ac:6e:22:bb:4f:52:63:65:4d:31:04:5d:11:60:1f:5c:d2:ed:
d2:38:15:17:23:48:98:60:88:5e:58:90:40:e4:3d:7e:a1:b6:
77:05:50:69:4b:28:e8:ae:44:43:d3:ff:ca:0c:c2:c8:81:58:
77:cb:87:9e:f7:d8:a1:5a:2c:1c:64:3a:42:8b:fb:a2:43:19:
38:93:f4:ee:27:45:25:b7:7a:99:1f:d3:5f:8d:ac:62:6c:e9:
74:ea:39:20:6d:5c:24:94:58:98:6a:2c:b3:43:16:13:2b:5b:
b9:19:46:f6:02:88:d5:9a:d3:7d:8c:0e:ae:15:11:f0:9c:1c:
3c:38:00:fd:23:81:78:cb:bf:39:0b:98:d4:d2:29:e0:02:f9:
48:2d:6d:17:5d:a7:14:0a:77:72:b0:a8:fe:bf:cc:80:4f:ec:
b4:10:d4:22:bc:16:21:fd:fd:bb:bc:2c:7e:2c:7e:8b:a5:60:
6b:db:c3:be:20:af:3a:bf:e9:b8:7e:23:af:80:f9:e6:df:00:
3d:9e:87:07:89:ff:cf:0d:63:75:bc:8a:d3:6d:a4:ea:0e:29:
71:c5:39:2a:19:ee:20:86:4e:46:f8:63:f4:8e:f2:f9:aa:7b:
f9:3f:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:03:31 2025 by rpki-client