Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
File: qUY-3mcgvjW60R9aiYbbsXpMMqs.cer (raw, json)
Hash identifier: jPNrcyHKgh2BeJUmnkIuPOYBDNGaYPFuyZkuOD6+jiI=
Subject key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B7F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 13:31:20 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 138603
IP: 163.128.244.0/23
IP: 2402:58a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178167 (0x2b7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 13:31:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:79:14:31:2d:21:28:bd:e1:6e:4e:4d:18:
80:be:97:ec:55:23:80:c1:27:f0:ea:c5:6f:f8:53:
ad:91:e1:d7:38:a4:b7:d7:75:65:7b:65:82:c6:65:
af:05:0a:80:5c:12:eb:cb:fc:d4:d3:57:af:54:b6:
a0:90:51:9e:69:3a:7a:10:e8:cf:e9:e0:74:e1:2b:
c3:bd:fd:7b:f5:76:b0:a6:86:7a:46:0f:0c:b0:6d:
c4:a5:bd:5c:cc:08:ad:07:1a:95:85:60:32:18:a1:
ad:7b:ed:17:0f:2a:87:df:77:ec:bb:c6:03:76:15:
40:de:58:a5:bf:ce:e8:5c:8f:78:24:40:97:fd:93:
93:e7:61:5e:ab:66:ba:38:d0:06:d1:5f:f5:a9:60:
bc:26:de:6d:65:5d:32:77:d3:aa:0a:fc:95:6d:87:
39:77:77:6a:1a:bb:0f:5a:b6:96:8d:49:27:bd:c5:
ec:11:94:9a:74:88:09:9f:ef:19:06:45:a8:5a:8c:
3d:e4:8d:76:3a:2b:10:de:db:df:35:c0:5a:02:19:
35:13:72:76:0a:66:2f:77:11:d2:8b:fc:21:91:e1:
22:1a:55:dc:3c:66:d8:53:7c:ef:74:98:da:2e:a6:
37:33:84:e3:2e:92:6d:d7:45:14:6c:32:96:6d:ad:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138603
sbgp-ipAddrBlock: critical
IPv4:
163.128.244.0/23
IPv6:
2402:58a0::/32
Signature Algorithm: sha256WithRSAEncryption
80:51:cd:f4:aa:d9:48:4e:be:88:08:b2:f3:2a:0f:87:97:84:
48:de:15:55:40:58:d0:ed:1a:0a:6d:c9:08:57:37:a3:67:cf:
ce:c1:c4:50:68:03:b0:dc:5a:07:2a:4b:9c:f1:9a:7c:d0:20:
d3:63:8b:6e:a4:f4:35:11:b0:b9:f3:ee:ea:c2:44:7d:76:66:
27:a2:a1:2a:c4:22:a1:57:80:91:94:9a:c6:bb:df:21:fd:39:
26:a6:92:96:36:8a:79:e1:f9:53:98:c7:54:d6:d4:fa:da:b5:
d9:d1:60:ef:c4:0d:f3:eb:3d:87:ab:5b:be:5d:c9:1b:1b:94:
c2:f2:39:c2:17:36:54:ca:b1:ba:d0:91:5a:28:63:b7:a6:dd:
31:ce:0d:41:43:25:16:65:7d:40:a5:84:80:0b:a8:c8:43:94:
ac:e1:ea:fc:a6:f8:e9:26:28:9f:65:06:e8:ca:df:f9:f7:18:
64:85:a6:aa:9c:67:61:56:0b:dd:ea:35:54:f4:fe:80:63:4b:
5c:8d:ee:10:d1:7a:70:2c:ed:75:ce:c8:13:7f:b2:cb:71:3d:
79:09:3e:ac:5f:0e:ba:33:03:b7:af:d3:4b:96:20:46:1d:35:
15:a4:c2:02:76:80:a2:d6:6a:0c:bb:55:d9:4a:14:b2:7e:2e:
8d:c1:f0:b5
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArf3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyOTEzMzEyMFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjhBRDQxMTAvBgNVBAUTKEE5NDYzRURFNjcyMEJFMzVCQUQxMUY1
QTg5ODZEQkIxN0E0QzMyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF+3kUMS0hKL3hbk5NGIC+l+xVI4DBJ/DqxW/4U62R4dc4pLfXdWV7ZYLGZa8F
CoBcEuvL/NTTV69UtqCQUZ5pOnoQ6M/p4HThK8O9/Xv1drCmhnpGDwywbcSlvVzM
CK0HGpWFYDIYoa177RcPKoffd+y7xgN2FUDeWKW/zuhcj3gkQJf9k5PnYV6rZro4
0AbRX/WpYLwm3m1lXTJ306oK/JVthzl3d2oauw9atpaNSSe9xewRlJp0iAmf7xkG
RahajD3kjXY6KxDe2981wFoCGTUTcnYKZi93EdKL/CGR4SIaVdw8ZthTfO90mNou
pjczhOMukm3XRRRsMpZtrTVNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUqUY+3mcg
vjW60R9aiYbbsXpMMqswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4QUQ0L0FBMTIzMEU0NUI2MjExRjE5MzQwQjlFRTlDODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOEFENC9BQTEyMzBFNDVCNjIxMUYxOTM0MEI5RUU5QzgzMzc3My9xVVktM21j
Z3ZqVzYwUjlhaVliYnNYcE1NcXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh1rMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBo4D0MA0EAgAC
MAcDBQAkAligMA0GCSqGSIb3DQEBCwUAA4IBAQCAUc30qtlITr6ICLLzKg+Hl4RI
3hVVQFjQ7RoKbckIVzejZ8/OwcRQaAOw3FoHKkuc8Zp80CDTY4tupPQ1EbC58+7q
wkR9dmYnoqEqxCKhV4CRlJrGu98h/TkmppKWNop54flTmMdU1tT62rXZ0WDvxA3z
6z2Hq1u+XckbG5TC8jnCFzZUyrG60JFaKGO3pt0xzg1BQyUWZX1ApYSAC6jIQ5Ss
4er8pvjpJiifZQboyt/59xhkhaaqnGdhVgvd6jVU9P6AY0tcje4Q0XpwLO11zsgT
f7LLcT15CT6sXw66MwO3r9NLliBGHTUVpMICdoCi1moMu1XZShSyfi6NwfC1
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:09 2026 by rpki-client