Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
File: DqjhgHgwQyFWBjSjtPJuxux2ISY.cer (raw, json)
Hash identifier: 4XLM9cWq9K4CcqE2Ff3uqz8PTs2KYAtIhHl+odm4+XM=
Subject key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:41:56 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 198.17.118.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 04:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33221 (0x81c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 13:41:56 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:3b:05:e7:0d:ff:03:d6:90:b7:d8:39:43:
6b:e5:83:07:5a:25:07:e6:a3:7b:3f:0f:73:27:a8:
98:ce:ad:78:71:bd:03:c1:7b:b6:23:87:0d:dd:b6:
bb:7d:55:c0:dd:a5:49:2e:60:8b:8c:d1:0d:6a:dc:
28:1f:20:2b:a6:6d:f5:18:e6:a8:a1:4d:59:60:d2:
5d:77:a9:0a:b7:ef:e6:36:54:54:e5:4e:3f:25:a7:
0d:2f:1c:66:ac:52:0a:40:4c:9a:4e:3a:bf:8a:2d:
24:72:a7:b5:85:ea:5f:24:6c:aa:95:62:bf:5a:4d:
18:1a:4a:13:17:99:3f:a3:1a:09:3c:73:03:bb:17:
ef:7d:b8:d8:96:52:ae:68:0a:60:a8:9e:a5:43:ea:
df:b7:1e:e2:f2:ea:82:fc:80:42:23:e7:49:9e:9a:
5d:09:7d:a0:47:d1:1b:18:8e:dd:dd:68:02:c9:93:
b1:85:29:1e:43:29:48:f2:9e:55:4b:73:b9:68:85:
9b:2a:c6:86:89:2a:7e:f0:bc:64:6d:9c:fa:b3:41:
e9:8b:a8:d0:9d:2c:19:38:c9:4d:22:42:f3:a3:cb:
8d:b8:9d:3c:d6:25:f8:ea:fc:f0:3a:b2:23:c0:5e:
e0:b2:5e:7e:ed:62:0d:52:12:3d:04:34:79:e1:22:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.118.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5f:80:e4:7f:b3:79:91:08:6b:81:af:c1:1e:7f:a1:35:04:
2a:43:e9:c5:8e:73:08:b3:5c:da:22:2e:d7:1e:bd:d0:0d:d5:
b0:ea:f0:2e:a0:fa:ae:b9:3b:09:e7:c8:cd:07:b2:c7:0b:ec:
c6:f8:ef:2b:7d:c4:18:28:88:8f:e2:1d:cf:f2:8d:05:f1:cf:
10:77:1f:49:24:90:dc:c6:de:c4:09:9e:0d:00:e2:2f:7b:33:
ab:a7:56:e3:51:04:7e:33:ad:62:4c:a4:f5:5c:9c:f5:26:2b:
04:e9:11:7a:23:d0:26:cf:50:c6:fb:10:be:b8:7b:c4:ce:4d:
ef:9f:ee:08:1b:8b:ef:d6:91:8b:55:f5:2c:f6:c0:0e:fd:6e:
49:65:57:37:07:42:68:85:ef:29:45:63:6d:49:e7:b0:1f:b3:
72:09:1e:bf:18:ed:8c:1d:f1:d0:a6:06:2b:ce:62:6d:61:5d:
05:4b:66:85:05:84:60:17:d7:b6:aa:a9:e8:2c:7c:e0:33:1f:
80:a0:35:f8:e7:24:71:97:0a:cf:81:76:2a:02:bc:23:ef:66:
df:42:70:7e:31:1e:a4:f2:78:ab:d5:92:ff:cf:4a:23:41:dd:
cc:d0:e5:b0:a0:e6:45:b0:2b:4f:59:7e:29:87:86:35:53:02:
11:ab:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:18:19 2026 by rpki-client