Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
File: QRX9yGsnZiNgOztkXUcIQLgDm8g.cer (raw, json)
Hash identifier: xOkH0WIe25IRSDfXTfTNJRRnl0/Kxn6M+s3PgE7Buo8=
Subject key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026B0C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Oct 2025 17:37:37 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154160
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158476 (0x26b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 7 17:37:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:27:b1:5e:a8:98:28:9a:39:9d:fa:f9:bc:
4e:76:24:c4:06:d3:7b:ac:fd:4e:02:5c:c5:08:3c:
a5:d2:4c:9f:ef:18:7c:71:c1:1c:c8:0f:3a:8d:31:
06:76:09:ae:f6:f2:ce:2a:4c:42:63:2c:e5:f6:5b:
c8:d1:e2:06:ce:fc:f7:c4:4b:23:e6:00:0d:70:3d:
68:fe:2e:b7:3f:e5:1e:10:ab:6f:cd:77:1e:10:27:
9a:d0:63:4e:e6:b3:d8:c9:33:8d:46:26:d9:3e:bb:
8d:ab:db:09:6f:20:47:4d:27:7d:ce:05:de:cd:b3:
14:29:d0:38:bd:d2:90:9d:1a:e1:a0:cf:df:6b:56:
61:45:ea:e2:6f:19:70:cf:ee:29:4a:6d:e2:7f:71:
47:5f:2a:80:f6:a0:33:42:0b:88:63:55:e4:78:37:
fb:07:d2:8b:51:4c:22:85:23:7a:45:66:db:43:71:
9d:d8:33:b8:40:68:6b:3d:ea:d3:58:0b:99:84:25:
ef:7b:f7:44:80:07:de:63:b8:64:43:cd:86:a8:f0:
8b:08:69:b4:d3:75:3a:7d:48:a8:08:98:66:9d:c5:
47:7a:ad:ba:17:58:43:f6:58:cf:11:06:90:e6:ba:
fb:07:ec:8f:d6:d2:ca:f3:6f:d7:a9:1a:68:7e:8c:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154160
Signature Algorithm: sha256WithRSAEncryption
d2:e0:79:93:07:88:31:71:23:58:cc:49:d6:91:ad:5e:48:af:
c6:d9:e3:76:ae:c9:5d:1d:8d:b9:91:65:5b:4c:49:53:03:ed:
d0:85:2c:d9:1a:05:6a:2c:af:f5:f6:96:3f:a7:cc:b4:68:ec:
dc:4e:20:1e:9e:13:63:70:de:fe:2d:e4:63:2d:bf:e5:61:cc:
7a:b6:70:a6:7f:e0:31:bc:6c:6b:76:60:3b:3f:ed:a9:fb:b9:
eb:4f:78:9f:32:89:ca:71:70:68:a9:e0:3c:6f:bc:94:aa:84:
44:16:5f:cd:cc:8c:ca:31:2f:ca:ed:aa:88:b9:78:ab:57:cc:
75:81:a8:36:ea:18:71:82:a2:d2:30:d9:f5:80:d6:37:3a:2e:
f3:63:90:0c:83:7a:89:2b:6c:61:17:19:95:8e:97:2c:1a:aa:
0e:c8:51:e7:be:db:40:5e:d3:26:2b:8f:e5:43:4c:89:eb:cd:
f0:d3:59:be:89:a1:f3:72:5f:81:09:8d:4b:67:9c:42:d0:9c:
c0:97:d5:66:3f:64:d5:85:9b:b2:68:32:8a:29:c3:3e:38:83:
20:4a:10:59:55:27:5b:e9:c2:97:b2:fc:91:9e:7b:a9:7d:fe:
f5:36:22:e9:6e:67:4a:ca:2a:b8:1a:3e:60:4e:d3:48:ef:7c:
2d:70:47:8d
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAmsMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAwNzE3MzczN1oXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkU5RTMxMTAvBgNVBAUTKDQxMTVGREM4NkIyNzY2MjM2MDNCM0I2
NDVENDcwODQwQjgwMzlCQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRhyexXqiYKJo5nfr5vE52JMQG03us/U4CXMUIPKXSTJ/vGHxxwRzIDzqNMQZ2
Ca728s4qTEJjLOX2W8jR4gbO/PfESyPmAA1wPWj+Lrc/5R4Qq2/Ndx4QJ5rQY07m
s9jJM41GJtk+u42r2wlvIEdNJ33OBd7NsxQp0Di90pCdGuGgz99rVmFF6uJvGXDP
7ilKbeJ/cUdfKoD2oDNCC4hjVeR4N/sH0otRTCKFI3pFZttDcZ3YM7hAaGs96tNY
C5mEJe9790SAB95juGRDzYao8IsIabTTdTp9SKgImGadxUd6rboXWEP2WM8RBpDm
uvsH7I/W0srzb9epGmh+jKRxAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUQRX9yGsn
ZiNgOztkXUcIQLgDm8gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFOUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RTlFMy80RTBFMzcxNEEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdz
blppTmdPenRrWFVjSVFMZ0RtOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlowMA0GCSqGSIb3DQEBCwUAA4IBAQDS4HmTB4gxcSNYzEnWka1eSK/G
2eN2rsldHY25kWVbTElTA+3QhSzZGgVqLK/19pY/p8y0aOzcTiAenhNjcN7+LeRj
Lb/lYcx6tnCmf+AxvGxrdmA7P+2p+7nrT3ifMonKcXBoqeA8b7yUqoREFl/NzIzK
MS/K7aqIuXirV8x1gag26hhxgqLSMNn1gNY3Oi7zY5AMg3qJK2xhFxmVjpcsGqoO
yFHnvttAXtMmK4/lQ0yJ683w01m+iaHzcl+BCY1LZ5xC0JzAl9VmP2TVhZuyaDKK
KcM+OIMgShBZVSdb6cKXsvyRnnupff71NiLpbmdKyiq4Gj5gTtNI73wtcEeN
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:11 2025 by rpki-client