Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
File: dQVcA_HORREaW3mWTntNV3H9t8k.cer (raw, json)
Hash identifier: cvqhRoZMjTgtgABD/Raot1/2iBnZ19BH0z5IcbEfDtQ=
Subject key identifier: 75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B57A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 May 2026 05:00:11 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 203.24.52.0/23
IP: 203.34.24.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177530 (0x2b57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 05:00:11 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91AD69A, serialNumber=75055C03F1CE45111A5B79964E7B4D5771FDB7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:a9:4d:a4:6d:e6:d0:3c:fc:9c:e4:3e:02:
01:80:e2:3a:9e:ee:fd:36:4f:74:3d:c7:f5:92:5c:
2a:1a:63:8e:e1:d1:a2:e0:71:49:5e:fa:24:30:83:
b7:3b:45:be:3f:e9:b0:05:49:bf:dd:d3:16:c8:38:
33:9f:01:de:77:59:90:f5:19:ce:c1:aa:ae:5b:f7:
0e:45:c1:28:ff:97:bb:ee:20:59:5f:a2:cc:80:a0:
61:6d:88:d1:a8:25:a2:e8:d7:f0:da:a1:a3:a0:ad:
76:19:67:35:1f:72:dc:17:e9:01:32:44:46:e0:6a:
03:2d:6e:5a:f1:d8:6f:f4:65:b3:c0:89:ca:15:0f:
06:89:1a:54:14:c6:c5:9a:18:7c:db:74:b6:9d:6e:
c8:92:ed:e7:f9:b2:35:56:21:7d:e1:99:fd:e8:64:
74:82:4b:42:16:73:a2:99:40:dd:4f:31:bc:7b:87:
03:d1:74:2e:b1:0e:8e:5e:5c:ec:ec:a4:33:94:e4:
26:79:a8:e0:92:22:02:73:f7:b4:6b:9a:eb:be:b2:
9f:61:fb:fc:33:c3:db:88:aa:9b:87:72:7d:97:f6:
5b:fd:16:8a:29:f1:bb:46:5b:92:75:3c:b8:45:b3:
11:ab:4a:1d:4f:5a:f0:e7:ea:e7:14:c9:d6:91:f0:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.24.52.0/23
203.34.24.0/23
Signature Algorithm: sha256WithRSAEncryption
39:c8:6b:f4:0f:7d:f0:11:5d:a2:c4:89:c1:a8:81:32:4f:b8:
dc:af:97:e0:f9:7d:72:61:b4:66:23:24:d6:e7:94:d9:e6:53:
d7:e1:37:79:40:7c:f7:dc:f3:5d:a3:51:9d:04:e2:1a:57:52:
a7:8f:07:28:82:ff:2f:f6:42:e7:79:07:a2:c0:ef:aa:c1:1c:
72:5e:93:f7:fb:e2:f8:96:26:b9:49:8b:bf:ba:f1:93:1f:01:
3e:2b:c0:91:40:f0:71:df:81:db:76:00:b6:80:55:10:13:d8:
43:93:f3:f0:ce:f5:e5:98:3b:68:53:b9:7f:0e:26:25:d0:5e:
e7:e1:c2:9e:da:1c:3a:ac:67:34:d7:d7:2e:f1:89:79:34:3a:
20:a1:00:4f:49:fc:5b:e8:c0:3a:db:3c:62:54:a6:6f:8f:43:
ef:d6:fd:86:5a:89:ff:83:bc:83:8c:1a:f1:2d:79:13:fa:da:
7d:6d:2f:94:c8:6b:97:43:16:b2:23:22:df:a1:66:93:5a:b0:
20:88:81:8f:0a:07:a3:de:d4:56:9e:1e:9c:f8:de:b1:6a:64:
86:78:0d:75:83:07:55:d9:05:11:a8:c5:07:2b:d9:83:b2:ec:
9d:c4:5f:e5:32:aa:28:2c:a8:33:b4:f0:49:fa:ae:53:37:11:
b6:8a:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:45 2026 by rpki-client