Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer (raw, json)
Hash identifier: /P6nhDS0MOuf57wWu/iS3RGcrFBvPiCoD8B1TNKgIko=
Subject key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C58
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Oct 2025 18:27:42 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.116.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27736 (0x6c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 16 18:27:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:ee:30:f1:3c:80:2c:6d:fd:bb:a0:39:f1:
16:ce:b3:1c:e9:57:82:14:12:96:54:dd:f3:6d:93:
32:6d:77:d4:25:0b:18:05:79:63:89:89:5a:b8:c6:
ad:5c:d9:4c:4c:0c:12:b4:6c:4b:ce:24:91:7e:b1:
e4:f4:45:1c:b8:01:94:67:21:11:b2:fb:80:ab:51:
b8:fa:6a:a1:54:64:bf:10:a1:75:8c:dd:2d:33:4c:
3b:4f:5d:e9:37:15:4c:7d:ae:47:cb:45:47:43:69:
b4:99:95:1a:20:57:5f:5f:ac:84:46:78:87:f0:12:
ed:d3:c6:21:9b:ba:5d:a8:19:ee:c4:fd:86:64:8e:
06:95:fe:14:66:e6:22:aa:f2:c0:92:d3:48:7b:de:
14:3b:66:b4:41:1c:9e:7d:60:c1:29:dd:cf:b4:a2:
fd:1e:d8:a1:7e:0f:48:4d:dc:85:66:88:34:ba:fc:
73:0e:ab:eb:85:59:4d:01:43:7c:ae:c7:a1:0b:77:
d7:80:03:32:7d:41:83:31:8d:3e:ce:76:91:52:8f:
89:a0:74:76:e8:a0:cc:70:a5:f8:51:a6:64:41:bb:
5f:c4:77:72:01:99:b8:81:02:2f:ce:fb:9f:77:84:
0a:83:c0:f6:b8:49:4e:e4:a2:b3:01:27:86:b5:77:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.116.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:9a:5f:61:c1:6d:6b:3f:50:f2:f6:22:e2:38:54:75:26:bf:
c3:66:35:e0:38:5b:ed:45:22:52:3a:b0:dc:d7:37:6f:20:84:
63:5b:12:12:7f:1e:92:d6:80:c7:25:ad:a4:05:50:93:b6:d5:
65:ea:90:c4:a2:69:98:96:f6:43:a0:c1:cc:5b:0b:60:10:5c:
cc:e0:f8:61:a8:a3:7f:45:58:ab:6f:7b:1f:2b:8f:a2:65:28:
7f:24:29:87:1e:b7:4a:04:1e:b0:6f:ff:d9:d6:b8:7e:ba:85:
5c:e2:bb:13:e4:66:8c:a9:9b:aa:dc:1d:1f:92:91:e5:c9:8f:
20:92:99:93:1e:83:d0:23:d1:10:02:59:81:1e:13:a8:68:65:
03:94:0a:7c:dc:b7:3b:f5:92:c2:e6:8f:04:b4:50:ff:84:dc:
73:7f:3f:51:ca:89:f6:04:c6:9e:d3:fe:9e:9e:03:94:a1:cc:
c4:e6:b2:66:f2:3d:63:73:1f:dc:01:7c:22:b3:7a:22:a0:15:
61:c4:7c:a6:ed:73:97:fc:79:36:6b:d5:81:b6:df:1f:ed:b9:
d8:17:d2:2c:82:11:68:a2:07:53:1a:37:21:be:47:cf:f4:5f:
98:ee:c0:f6:5c:ec:85:de:9a:57:d3:b0:59:5f:98:39:36:bb:
7e:41:0f:93
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMDE2MTgyNzQyWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRG
MkVEMzhBRTBCMTg5NzBGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALqT7jDxPIAsbf27oDnxFs6zHOlXghQSllTd822TMm131CULGAV5Y4mJWrjGrVzZ
TEwMErRsS84kkX6x5PRFHLgBlGchEbL7gKtRuPpqoVRkvxChdYzdLTNMO09d6TcV
TH2uR8tFR0NptJmVGiBXX1+shEZ4h/AS7dPGIZu6XagZ7sT9hmSOBpX+FGbmIqry
wJLTSHveFDtmtEEcnn1gwSndz7Si/R7YoX4PSE3chWaINLr8cw6r64VZTQFDfK7H
oQt314ADMn1BgzGNPs52kVKPiaB0duigzHCl+FGmZEG7X8R3cgGZuIECL877n3eE
CoPA9rhJTuSiswEnhrV3250CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSoVo9SeTzD
SFeFDE8u04rgsYlw+DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQzMjQvRUFBOUNDRDQ3QjFDMTFFRkFDMTA5NDE2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg0MzI0L0VBQTlDQ0Q0N0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4
dzBoWGhReFBMdE9LNExHSmNQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC7dDANBgkqhkiG9w0BAQsFAAOCAQEAqppfYcFtaz9Q8vYi4jhU
dSa/w2Y14Dhb7UUiUjqw3Nc3byCEY1sSEn8ektaAxyWtpAVQk7bVZeqQxKJpmJb2
Q6DBzFsLYBBczOD4Yaijf0VYq297HyuPomUofyQphx63SgQesG//2da4frqFXOK7
E+RmjKmbqtwdH5KR5cmPIJKZkx6D0CPREAJZgR4TqGhlA5QKfNy3O/WSwuaPBLRQ
/4Tcc38/UcqJ9gTGntP+np4DlKHMxOayZvI9Y3Mf3AF8IrN6IqAVYcR8pu1zl/x5
NmvVgbbfH+252BfSLIIRaKIHUxo3Ib5Hz/RfmO7A9lzshd6aV9OwWV+YOTa7fkEP
kw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:06:27 2025 by rpki-client