Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer (raw, json)
Hash identifier: pC6t/iao+lxDD4gst5ryV87YoOumwIFGY96AuS6TaKY=
Subject key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 789B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Mar 2026 07:36:38 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.94.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30875 (0x789b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 17 07:36:38 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:1a:48:89:05:08:17:35:21:da:0f:c4:4a:
02:ce:6d:35:40:33:be:bd:d4:6d:ce:6f:e1:4a:39:
f7:e0:b5:0d:7c:c2:7a:74:1b:ca:72:c9:58:d9:15:
5d:4d:90:8b:06:e5:eb:07:e4:ac:7a:36:ce:ea:11:
ee:78:ec:99:54:12:76:ed:c0:67:c1:ff:17:b3:06:
57:58:9b:9a:92:34:2f:57:42:0b:24:a0:20:a6:07:
97:1d:97:de:5f:5b:56:37:6a:50:36:cc:81:d3:cb:
54:b9:42:ba:77:df:b8:c1:a9:d2:1a:0b:22:f4:f2:
1b:7a:11:4d:57:69:10:c2:da:75:f9:ea:72:9e:cd:
47:16:6b:de:9c:0e:60:ba:77:fb:09:d9:63:ed:86:
f5:9a:0d:15:0b:d4:d9:70:df:46:25:55:0b:74:75:
fb:ad:00:45:cf:b6:4b:76:f9:04:6e:50:6c:c8:f2:
71:d2:ad:50:3d:60:34:eb:e7:e3:f0:26:09:11:8a:
ff:19:64:d7:63:64:98:12:e8:7c:82:09:39:c9:75:
e8:2f:2a:27:57:91:df:d0:a9:f8:9d:fa:a9:f9:81:
55:ba:ef:2c:30:ce:27:ae:78:79:f8:7c:89:06:7c:
58:7d:e5:00:3c:7f:bc:7c:26:95:8f:48:7c:4a:c5:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.94.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:2b:9a:7e:19:0e:df:b3:6a:af:61:a3:1d:1c:89:44:30:
05:a7:4c:2e:c3:26:12:96:87:1f:4b:a6:53:f3:b3:24:ce:7a:
ab:f3:cd:a8:ec:7c:ec:e2:64:07:ee:32:eb:6f:58:b2:18:3b:
42:66:b6:26:ea:25:a8:82:3a:52:60:27:56:79:b5:08:8c:28:
6c:16:43:25:d9:08:a7:e9:1e:f4:3f:b0:8e:39:1e:ca:6a:42:
78:5f:0d:88:17:c1:65:3f:9a:1b:20:2f:ad:0f:25:3a:58:88:
b3:56:e4:b5:3e:72:5a:f3:2e:26:13:ec:9b:18:c1:9b:32:ba:
04:db:f7:cc:b9:b6:2e:2b:70:c6:df:d7:0c:e2:17:0f:e2:f5:
be:1e:d8:74:a0:97:a2:8b:7a:4d:d5:e4:ab:d6:e7:7b:b9:be:
f7:28:14:3b:bf:c3:a1:36:69:9b:36:24:26:bc:45:ea:9f:2e:
32:4a:34:b9:84:12:fa:4c:7e:48:13:c1:f6:64:87:4d:7d:19:
da:80:e6:6b:e3:4c:d4:2a:9f:83:7e:77:b5:89:b1:65:90:ac:
a0:38:4c:b5:26:15:9d:01:2e:36:cc:56:0a:6f:74:94:6d:0e:
87:61:30:2b:29:ec:ac:21:1d:21:40:de:a7:b9:db:56:d8:7a:
93:42:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:48 2026 by rpki-client