Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
File: PqTXApDMqv5dzJxdpfW-J_7d5F4.cer (raw, json)
Hash identifier: i8hvQ7Am4WZAwf3qqItTy585UsPlrM3oFr6AhS93SLw=
Subject key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C285
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jul 2026 12:34:14 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 24543
IP: 202.14.196.0/22
IP: 203.17.32.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180869 (0x2c285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 12:34:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:fc:b9:c1:7e:bc:65:5c:4d:41:ba:3c:d7:
d5:c4:f8:62:05:20:91:46:61:df:ed:ba:a6:b6:38:
50:99:46:2c:80:70:48:75:c6:38:9f:73:eb:a9:0e:
ea:c5:3b:6b:e4:6d:4f:95:dc:36:cf:75:90:84:4a:
5f:4f:a1:c8:9a:e8:f5:98:15:b1:23:90:69:2c:e2:
d7:6c:4a:ba:88:15:79:49:f2:c1:3f:63:e9:eb:ea:
c2:17:8a:63:f1:f9:ba:02:e0:93:fc:84:06:25:32:
df:62:6d:2b:8b:bc:da:6b:88:90:a5:83:46:34:09:
79:28:e6:05:e6:16:11:41:92:f5:a0:b9:1e:9a:04:
43:ad:ce:c3:34:8b:b8:a4:63:e2:4a:96:6d:47:6b:
1d:c8:01:a5:d9:ce:7e:1a:32:30:ce:02:f9:1f:6e:
8d:83:1b:29:78:7e:b6:fd:06:35:da:9e:c9:33:ee:
06:dc:ab:b8:a9:cf:5b:3b:4d:fe:93:d3:98:72:71:
37:f8:2c:bc:09:69:c4:58:a5:de:99:69:e6:02:81:
8c:f8:2c:c8:b4:6e:85:a8:ea:52:56:b1:b0:77:ab:
e4:9a:51:e9:09:ec:ae:5c:10:1b:8e:d1:51:d3:36:
59:54:af:69:9b:d1:e8:5b:eb:3f:aa:73:46:6f:0f:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24543
sbgp-ipAddrBlock: critical
IPv4:
202.14.196.0/22
203.17.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:17:8a:b8:cb:47:9c:fe:5b:af:4a:46:da:81:c0:43:66:6d:
05:a3:77:65:90:c0:a1:ec:d2:a8:90:9f:fc:ef:ad:18:88:d9:
01:ed:b4:db:11:cd:df:b7:09:a2:b6:6a:f7:f4:44:90:11:49:
a8:06:a4:14:e1:54:e7:6e:f9:96:18:82:a0:18:b1:a3:b7:7e:
1e:87:e9:7b:d6:37:8a:39:20:8d:06:97:e9:a7:fd:d2:57:71:
ac:2d:8c:fe:11:90:32:8c:09:1f:6a:9a:5c:8a:42:71:29:36:
ce:48:e9:df:04:d7:73:8e:da:0e:49:be:98:6c:c4:7a:c2:a4:
b6:cd:91:fa:72:58:34:61:90:0e:5e:d1:2e:2c:72:46:89:cb:
dd:e4:3c:0e:92:71:b3:61:63:20:9f:a3:c1:b4:8b:5d:51:41:
d7:2d:23:9e:8c:53:c2:6f:1c:03:e2:e6:f1:3b:1c:5c:14:01:
fa:48:73:2d:6c:f9:00:a4:fb:62:91:d7:40:7f:c5:b6:99:68:
46:6a:6e:67:4e:5c:ba:66:3d:cd:ad:f8:6e:e2:88:f8:a3:41:
a0:e1:b1:50:7b:51:53:d0:34:bf:06:ca:05:61:85:49:16:44:
aa:4c:fb:7a:dd:53:41:5d:3e:54:43:26:3b:51:59:42:37:19:
4a:fb:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:19 2026 by rpki-client