Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer (raw, json)
Hash identifier: Ra/kXCMtBN1jWqdoZebr/lCmrZEWXZsHnqv73hi4xpY=
Subject key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7850
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 08 Mar 2026 07:17:25 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.232.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30800 (0x7850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 8 07:17:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:0e:d7:9f:31:32:0f:4a:2c:05:b6:66:80:
9c:bb:6f:d5:f1:2d:d1:55:53:18:ff:1a:75:b8:be:
e7:f5:34:92:d9:69:60:49:9b:71:2a:cb:0a:0a:3c:
b6:95:a7:1e:96:70:26:e5:6d:20:56:f7:80:71:b7:
e1:75:ff:5f:6d:47:e8:0d:a3:00:e3:29:2f:e1:f1:
10:d0:9e:c5:29:84:b1:7e:52:04:1e:d9:61:b9:81:
ac:dd:49:b3:1f:97:3b:42:6e:52:b7:5e:07:76:0c:
4a:4c:9c:c3:fa:2d:6d:b7:a5:cf:9f:5c:1c:48:90:
89:43:b6:30:62:6c:0e:37:da:88:52:67:fe:c7:13:
49:1a:25:76:4e:37:24:51:9b:a8:e9:ac:1e:83:30:
db:b0:e1:5c:a3:cd:32:c4:d0:69:c5:d4:2f:79:58:
83:f7:05:ef:6d:cb:b8:ce:84:b5:4c:22:fc:3a:32:
38:5a:d3:6a:47:51:c3:a2:0f:b9:e0:c6:9d:03:01:
87:01:1b:e9:56:83:9a:5c:c5:53:f0:73:20:92:ed:
dc:a2:69:d2:8f:5f:21:f6:84:f3:91:1a:5a:92:30:
6d:95:ef:97:2d:b9:97:bf:3d:ec:09:47:6c:13:4d:
68:43:4d:6f:fb:dd:a6:fd:ea:be:ee:49:8d:a9:95:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.232.52.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:c2:32:5b:af:34:29:48:c0:2d:ef:db:0c:81:b3:a6:0d:16:
a8:88:ad:4f:60:d3:e6:bb:24:99:e5:e0:d2:22:25:ca:1a:d6:
35:24:bc:f5:e3:15:27:be:82:fe:3b:42:39:6f:61:01:f8:57:
a0:09:81:08:04:ce:74:5b:de:14:f6:a7:94:f5:c0:7b:ae:a5:
a8:c6:8e:ca:12:cf:9a:d5:42:01:76:9e:b2:74:2c:8c:90:01:
a8:51:79:3f:97:41:85:c1:8b:bc:06:92:55:48:98:20:37:d0:
c6:af:87:ac:7e:70:70:5c:76:b3:9b:cc:ec:6d:92:cb:18:5d:
b1:7c:ae:95:05:bc:57:ae:87:18:14:a8:d0:e0:57:8c:d6:ca:
44:47:c3:0c:6e:af:c7:46:d7:63:1c:90:90:92:79:5e:4a:41:
cf:85:fd:5d:6b:27:b6:8c:80:cf:19:f3:cb:8d:dd:ba:81:f0:
df:df:ac:ca:b4:16:9d:42:ae:f8:3c:8a:77:8a:7a:d0:f1:a6:
6d:75:46:73:e7:a8:0e:d7:9c:60:00:eb:16:f8:80:51:ad:f3:
b0:b7:1e:ed:2c:ba:b2:83:2f:d8:50:00:a3:71:42:e8:eb:a1:
4a:10:86:bc:e4:fd:56:f1:e4:70:54:45:60:df:ae:ce:d2:3e:
63:6e:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:54 2026 by rpki-client