
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer
File: CqtotenM02zgL8fv_DHy08o52yc.cer (raw, json)
Hash identifier: GtdJuvJjWmtd5TyzPzAF6jou4ENdIAeOHk2VkfFI4F0=
Subject key identifier: 0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7ADA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 12:31:48 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.16.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31450 (0x7ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 4 12:31:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9163FDD, serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:42:ad:4c:89:7d:88:ab:a6:3b:53:97:b6:
15:05:b5:2d:f2:d4:16:af:bb:1c:7e:08:51:1e:7a:
35:17:cc:85:a1:6b:3b:f8:a7:b5:a2:a0:d6:04:ae:
fa:42:12:91:c0:92:a0:12:6e:6d:99:ee:74:ce:97:
52:31:17:93:85:99:57:58:b5:2a:8d:85:87:1d:15:
9c:ec:e7:8b:a6:56:eb:00:d9:95:09:91:37:b4:29:
89:be:00:fc:14:50:01:87:95:18:1c:fb:6b:b4:ef:
a5:59:aa:95:b4:20:16:82:42:12:c0:0e:d7:58:f2:
90:3d:1a:28:1c:28:c5:e7:68:fd:22:59:e3:66:0e:
98:1e:c9:46:7c:41:74:2e:0d:6a:1a:37:c6:aa:50:
49:f6:7d:25:c1:93:16:67:5d:59:23:0f:40:82:70:
b4:ab:5d:2e:3d:e5:af:6b:fb:88:5e:88:d2:3e:ec:
42:00:64:26:b3:a1:c8:1c:8d:07:17:7b:2e:3f:1f:
37:d9:5d:ee:28:4c:7f:12:92:01:89:72:4e:01:f5:
4a:db:b2:24:89:88:80:03:2f:d7:3e:a6:ff:91:2e:
bf:1b:ee:74:30:f4:e6:46:2a:8c:f9:9c:51:8c:0d:
cf:c6:ee:c5:6c:4f:88:7b:6f:29:46:b8:c5:3d:33:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.16.0/24
Signature Algorithm: sha256WithRSAEncryption
27:74:80:6f:71:bd:5e:cf:be:16:63:33:d1:f2:38:d0:7d:9f:
7a:eb:38:c1:47:07:e3:b9:12:ea:15:34:2f:67:29:d8:0a:82:
23:c2:bb:94:68:0e:41:60:c2:88:d9:d4:d4:3f:8e:7a:da:44:
37:44:d9:3f:14:27:dc:89:4e:81:5a:f8:6e:c2:38:1c:63:d8:
7a:17:80:79:57:43:c7:07:b9:4e:38:9f:1d:26:34:97:2e:ea:
63:3e:00:d6:93:85:98:0d:85:cc:6d:8a:cf:7c:1e:e8:60:dc:
33:88:38:8e:ba:4e:e7:d4:21:43:8b:d7:83:6f:cf:de:cb:81:
56:32:18:7c:75:9f:e6:cd:c7:08:b0:88:fc:f2:63:1a:b0:c4:
72:7d:be:f4:1a:b0:5d:03:e8:e0:e6:22:10:df:bf:85:84:dd:
15:7e:5a:7e:89:e3:2a:8b:55:c3:4e:33:10:1c:f4:d8:f6:ea:
b5:bf:54:eb:9d:87:4c:11:cc:d6:37:26:40:18:29:de:a9:ff:
79:7a:c8:82:67:e5:bc:bc:ca:80:69:8c:bd:66:5a:4c:9f:ac:
13:ac:67:76:34:ca:8d:f0:ea:b7:a5:24:10:bf:4d:3c:1d:dc:
e0:bd:e8:87:4c:c2:a5:f9:55:af:69:87:7e:53:ac:c5:62:b5:
60:4a:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:59 2026 by rpki-client