Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer (raw, json)
Hash identifier: s9pdLGp1tbLN9nixwaOIl8vdt7p5peZK39j/bYl2lpE=
Subject key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7865
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Mar 2026 02:42:58 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 146.178.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30821 (0x7865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 10 02:42:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:08:ff:0d:d7:82:c4:00:c9:44:ca:27:0f:
6d:97:63:85:10:9e:23:48:b7:01:17:50:eb:a3:30:
4f:b1:fa:5e:d5:2c:3a:e3:6a:c7:86:65:97:63:81:
32:ae:49:2c:96:9c:40:d3:e6:37:e8:dd:9d:bf:b8:
e7:55:0b:40:91:64:c6:37:ca:cf:21:5a:c8:a9:c2:
96:bf:75:9d:bf:22:60:4c:e6:69:ad:de:ae:c9:79:
89:40:fe:26:01:53:96:d2:5e:b5:ef:c5:21:0d:ef:
20:e5:14:d7:62:d7:bd:54:27:89:1f:6c:4d:14:81:
0a:9f:e4:13:a8:4e:2a:17:d1:1d:2c:c8:e4:c5:15:
f2:01:df:b9:5e:f5:0e:eb:21:a5:37:79:d2:88:1b:
79:0d:60:ac:29:45:1d:91:d3:4c:42:72:74:9e:8d:
05:ee:18:66:83:5c:15:b5:1f:96:3c:02:d7:bd:49:
1c:fd:88:48:a6:04:ed:ba:f4:da:7a:73:d0:55:58:
f4:cc:b1:91:74:d8:02:e9:e0:a5:07:aa:e7:df:db:
2e:0e:b6:0e:33:ae:98:83:11:37:9c:19:36:80:62:
77:20:e4:c3:16:47:28:16:da:46:a8:30:c2:07:ca:
05:d3:52:c6:da:b5:e9:09:ab:8a:d3:f8:00:98:d3:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:e0:f6:40:68:00:65:b8:a5:da:86:b7:99:4a:81:f8:ed:a3:
d1:45:84:cf:0e:0a:70:50:bf:2f:bf:12:1b:c7:f4:e0:59:e0:
26:da:7a:95:63:ba:50:02:60:e5:18:58:25:f0:92:42:75:0e:
96:71:e1:c2:72:90:e2:24:bc:d0:b0:83:31:01:fc:2d:72:98:
fc:87:e3:f3:ed:1f:27:ee:e8:90:c8:5a:c5:b1:42:87:71:5a:
79:da:a9:c5:45:da:a4:ea:8f:16:e1:8b:43:53:e7:97:de:f4:
1a:be:a5:be:27:f3:f8:c9:0b:d0:d7:73:47:23:c7:00:56:b9:
01:35:b3:4b:66:d5:ee:fa:42:97:5c:0c:b9:81:11:eb:34:d1:
57:cc:f7:82:ee:3a:e4:80:aa:36:de:b5:db:a0:a7:9a:7b:c3:
00:54:ce:72:98:93:0b:72:90:0a:ed:47:81:a1:12:38:5d:27:
00:76:85:47:9a:7e:a5:30:ae:37:18:9f:72:9b:5f:14:68:52:
3f:54:39:18:9a:80:1d:bd:24:b4:ab:4e:d9:fe:ba:ef:46:64:
0a:d1:ba:8f:9d:a8:78:78:35:fc:88:f3:29:c7:da:bb:c2:f6:
45:a5:95:b1:f7:b7:c8:da:06:dd:a3:c5:79:e9:44:da:59:27:
d3:7a:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:42:19 2026 by rpki-client