Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
File: qkPN2PNDwbXd5ZFqct92iMqueoE.cer (raw, json)
Hash identifier: yRlM0kIZim4o32auULvjU2TmWAYyhTQ+dhAj37K1uG4=
Subject key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 07:07:25 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.146.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32525 (0x7f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 21 07:07:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:ed:f7:65:a9:ed:dc:0f:79:50:52:c9:89:
67:d6:1c:0a:63:5b:b7:07:44:0d:51:94:99:67:d1:
d7:f4:55:88:36:1c:da:d1:60:85:68:b8:27:a1:3e:
37:db:59:92:09:9d:da:1f:9d:48:7a:75:4c:04:bf:
ce:33:96:49:ac:e6:44:f9:48:7e:10:88:73:34:58:
da:2c:a9:19:8f:98:1b:6c:81:fe:85:27:f3:08:82:
b3:52:b2:c3:88:a5:a7:77:30:e8:9f:ae:d0:40:a6:
64:df:ee:dc:32:e1:a3:01:ba:87:df:42:6e:d4:b4:
7d:fe:d6:6c:a2:61:bd:71:b3:f8:dd:6c:26:fe:4f:
b7:de:db:6d:a6:75:ec:db:86:a3:9c:db:fd:43:eb:
3f:37:b8:be:74:44:1c:2f:8b:21:ab:53:42:d8:74:
0f:75:df:48:99:73:a1:3f:ee:00:f9:e1:4b:90:af:
91:52:9f:15:04:2b:1b:15:a8:b8:5f:9a:34:66:ab:
dc:df:30:14:24:92:92:4f:67:71:ec:1f:f5:cd:24:
b5:cd:cb:91:1a:3e:5f:0b:8f:4f:18:e8:d5:cd:ca:
11:82:bc:f5:e5:22:f3:fb:a8:ca:44:07:93:a4:d4:
df:f0:d1:ce:e6:8b:57:a8:23:99:4b:09:c9:7c:dd:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.146.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:af:ef:6c:88:9b:3d:f1:78:cc:11:6c:25:51:61:34:d4:1a:
67:8d:8c:77:b6:1e:0c:ea:c6:69:ae:b4:7f:5c:38:68:b1:c3:
fa:19:54:fc:cd:7f:c4:6b:0e:2e:c4:56:1f:a0:bf:84:34:18:
53:d4:be:ce:30:fa:e3:bd:5b:6d:90:00:0f:5d:3e:fb:b9:0a:
bf:a7:90:22:4b:21:cc:1b:06:2f:5c:50:bd:26:f6:d7:b1:ff:
2d:e7:79:85:7a:47:ff:04:1c:94:3d:93:24:b5:5f:09:1d:7f:
43:69:8e:86:8a:b7:a2:ce:c5:a2:7d:d9:14:09:ac:98:ac:be:
dd:65:87:21:82:ce:e5:49:13:44:50:b2:5d:a4:16:74:9c:5c:
14:06:7d:e9:47:e8:2c:fb:01:74:60:52:00:37:59:99:ae:a3:
80:09:55:e6:eb:49:28:f9:b5:99:ac:cb:f0:86:55:1d:55:09:
25:47:b7:81:b1:2e:37:61:de:26:8a:38:82:e4:08:50:bf:83:
e9:48:89:5d:f3:95:a3:f3:c3:bc:2c:49:29:4e:8b:f1:3b:83:
7b:67:cb:50:25:1a:27:3e:d6:39:3d:b8:d1:73:ab:46:d2:b6:
74:72:f5:46:05:fe:9c:99:21:b8:5d:2b:4b:d0:92:58:87:6d:
fc:58:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:52 2026 by rpki-client