
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
File: qUY-3mcgvjW60R9aiYbbsXpMMqs.cer (raw, json)
Hash identifier: v8MyhxQR2JCDV+BHmq24W2njGrT3iJrOVlgo7k8O0c8=
Subject key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CE8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Aug 2026 23:48:27 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 163.128.244.0/23
IP: 2402:58a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 22:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183951 (0x2ce8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 23:48:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:79:14:31:2d:21:28:bd:e1:6e:4e:4d:18:
80:be:97:ec:55:23:80:c1:27:f0:ea:c5:6f:f8:53:
ad:91:e1:d7:38:a4:b7:d7:75:65:7b:65:82:c6:65:
af:05:0a:80:5c:12:eb:cb:fc:d4:d3:57:af:54:b6:
a0:90:51:9e:69:3a:7a:10:e8:cf:e9:e0:74:e1:2b:
c3:bd:fd:7b:f5:76:b0:a6:86:7a:46:0f:0c:b0:6d:
c4:a5:bd:5c:cc:08:ad:07:1a:95:85:60:32:18:a1:
ad:7b:ed:17:0f:2a:87:df:77:ec:bb:c6:03:76:15:
40:de:58:a5:bf:ce:e8:5c:8f:78:24:40:97:fd:93:
93:e7:61:5e:ab:66:ba:38:d0:06:d1:5f:f5:a9:60:
bc:26:de:6d:65:5d:32:77:d3:aa:0a:fc:95:6d:87:
39:77:77:6a:1a:bb:0f:5a:b6:96:8d:49:27:bd:c5:
ec:11:94:9a:74:88:09:9f:ef:19:06:45:a8:5a:8c:
3d:e4:8d:76:3a:2b:10:de:db:df:35:c0:5a:02:19:
35:13:72:76:0a:66:2f:77:11:d2:8b:fc:21:91:e1:
22:1a:55:dc:3c:66:d8:53:7c:ef:74:98:da:2e:a6:
37:33:84:e3:2e:92:6d:d7:45:14:6c:32:96:6d:ad:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.128.244.0/23
IPv6:
2402:58a0::/32
Signature Algorithm: sha256WithRSAEncryption
08:44:4c:40:f4:f1:ab:0b:6d:b8:f6:b8:c6:87:5e:76:1f:9e:
db:fd:26:ac:cd:35:f8:d4:aa:01:52:15:95:a1:6c:12:4f:55:
65:a7:38:71:c8:c0:98:e3:a3:b9:d2:82:0a:84:6f:32:b5:5d:
70:ce:59:bd:00:e9:32:40:33:21:e3:30:e7:f2:27:a7:ca:9b:
bf:54:ec:c4:2e:a0:83:ee:97:57:c3:3f:d5:66:d0:b7:ec:7b:
bf:5b:19:cd:7c:c2:9f:09:85:9e:7b:e8:62:d1:e4:08:c3:ae:
ac:1e:18:c8:86:08:e5:b2:db:2f:cf:45:b9:d2:ac:d4:81:d1:
dc:9a:52:27:d6:36:9a:3d:b3:e0:19:22:41:70:f9:1a:72:9d:
cc:11:57:ac:a1:37:48:a1:59:c2:ef:96:f9:03:61:09:6d:98:
cc:58:ac:6b:6d:89:8a:b6:3e:8e:32:3d:7b:10:84:50:b7:4d:
72:dd:18:86:8a:40:34:47:15:de:f0:c2:02:ce:53:ff:4d:9a:
5c:6b:82:a5:0b:d3:5b:70:a2:a1:98:7b:51:7e:8f:e8:07:42:
09:2c:b7:0f:bf:6d:e9:07:af:ef:b8:8b:5e:55:3e:19:7b:fb:
53:8f:48:c6:a7:5c:94:f3:07:72:fe:23:f3:16:bb:96:2d:0a:
6e:e9:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:19:35 2026 by rpki-client