Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.cer (raw, json)
Hash identifier: tGa1pezXSD4s3GPWsUx8AI2/jfALG7VpaTaFl55eQf0=
Subject key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 781A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:54:40 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.224.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30746 (0x781a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 2 13:54:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:4f:33:20:74:71:78:0e:08:8a:4e:21:80:
fe:8b:fb:4b:17:60:c2:4e:49:8a:f4:44:46:84:51:
ab:58:d8:8c:14:87:33:b0:47:0d:f1:fd:66:31:8c:
a7:9b:5d:df:8a:02:ba:c4:d9:2b:8b:cf:eb:68:a5:
19:3a:c5:f5:e5:3e:3a:03:d3:77:05:1d:22:f1:7d:
cd:49:66:4b:10:e4:2b:0a:51:de:01:2e:84:a4:de:
a2:77:9f:4f:17:11:f8:5b:50:f5:97:db:47:69:49:
0e:8c:b1:8e:ad:73:30:9e:db:1f:1b:02:b0:d3:c2:
96:16:26:51:78:1e:04:63:86:ea:a3:77:6c:b3:a7:
2d:94:c2:b2:fc:d3:a5:2b:d7:7f:e5:67:c1:ff:c4:
0f:73:b9:b7:39:38:f9:09:20:4b:84:7d:f5:ac:7c:
81:dd:9f:21:a1:0d:bf:b7:81:a4:68:a9:d9:c6:d4:
b5:cb:fe:0d:0b:58:2c:66:22:7a:2b:15:72:56:6d:
3c:e7:7f:ec:37:ab:ba:6c:23:7c:6c:ee:97:92:86:
61:36:9f:60:cb:d6:fb:e2:af:b9:8d:8f:cf:04:c6:
bc:5f:4d:32:52:2b:c1:97:89:19:26:66:3d:92:79:
be:f3:fd:40:2e:20:ca:60:2b:4b:4c:c3:35:18:5a:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.224.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b3:b3:11:23:68:c2:fd:95:51:4c:61:a7:17:84:22:aa:70:
de:7a:25:46:73:e0:8e:b5:6e:4d:8f:06:0d:00:27:23:81:80:
f3:75:ec:f1:a9:e1:6a:bc:6c:0e:b4:45:ed:72:b5:f2:f7:92:
aa:4c:94:d7:b6:26:b9:18:fb:c4:57:d5:84:9a:ef:7a:f2:9a:
12:33:22:84:60:98:ec:7e:b3:69:8e:2a:2f:54:f9:28:bf:3f:
fd:cd:27:24:c9:b0:56:8e:bf:df:f2:7c:5a:18:35:ea:d2:78:
f1:0c:a2:38:ba:2e:4d:7f:e7:11:3c:ac:2c:a4:0a:1a:ce:e2:
25:39:29:08:1c:8c:f1:d7:0b:ad:54:b9:ce:99:69:86:5a:f0:
57:ae:32:ee:60:7d:77:98:4e:ac:5d:9f:b5:ac:24:96:c2:bd:
50:d4:ed:ef:d2:33:8c:e6:29:c2:53:b1:a3:9e:a1:d9:fd:92:
58:75:c3:09:40:9d:30:d1:38:9e:79:26:1e:00:e0:66:a9:d7:
fd:5b:6d:64:11:bf:5a:09:66:2b:ea:08:73:0b:cb:18:0f:c7:
a5:0d:b7:9a:48:ef:c9:a8:a0:14:cd:ca:a2:58:13:00:7b:c6:
b0:51:bc:9c:a6:f5:ae:03:d1:cc:8d:64:52:be:b8:bb:74:ba:
f2:b1:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:54 2026 by rpki-client