Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer (raw, json)
Hash identifier: 5XtfrMt4CNncFuoVOal7mFrpC4nVWI6hTwOlGq3TFBw=
Subject key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B25D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 May 2026 08:17:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2402:4480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176733 (0x2b25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 5 08:17:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:5f:08:14:ed:d8:59:8d:a5:cb:72:ca:34:
e6:68:37:db:ee:36:e8:66:37:c0:a9:be:5a:81:5d:
33:3e:ae:86:bd:0a:50:40:49:1f:28:e9:57:39:bb:
5b:46:e9:29:63:ea:1c:e5:89:2c:07:63:78:fc:46:
12:a9:7a:f6:29:40:36:a6:e3:3b:09:be:fe:a4:ca:
7c:e1:77:17:c2:19:ae:0a:a1:c4:f6:9b:b8:9b:4d:
d1:5d:a6:58:95:8f:44:5b:2c:fe:bd:ea:69:d5:10:
62:4a:b4:ab:3a:4c:7d:88:7e:91:4f:e1:9b:65:b0:
1d:cb:fe:6b:39:95:b0:0a:2f:98:4d:b7:51:c1:b1:
04:11:af:a5:ce:dd:8e:66:30:9d:bb:f2:7c:5e:e2:
83:92:8f:70:6c:67:7b:e8:23:d1:5e:c2:44:9f:b6:
e6:5f:52:e4:7d:2a:d1:c1:0e:fb:ae:80:73:53:84:
d1:80:68:c1:ec:91:fd:2e:05:e7:3b:38:e6:0d:3b:
2b:3a:a4:ea:68:51:75:b4:b3:70:41:29:80:69:85:
b4:c2:24:b9:b5:8a:dd:b6:30:96:82:06:88:ea:ee:
3d:27:48:6f:7a:5d:b7:f0:d8:b0:74:d3:2c:fc:bb:
2e:7a:34:18:68:42:8d:9b:1d:24:d9:fa:d5:99:bb:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4480::/32
Signature Algorithm: sha256WithRSAEncryption
ab:02:fa:5c:5a:5a:05:15:af:2c:ea:07:51:d2:65:29:87:b7:
46:82:8a:ca:85:5d:04:42:5d:45:11:bb:d1:23:ce:08:6c:4a:
ba:e8:ab:b2:2c:ac:af:c0:a5:a0:88:27:f7:a3:bf:60:96:61:
5b:51:fb:62:31:37:34:a9:10:3f:2c:87:9c:3d:24:d8:6f:08:
ed:ba:1e:95:5a:de:09:45:30:91:ae:bb:77:c1:8d:35:f0:aa:
05:e4:b0:01:b0:e4:fa:31:d4:db:4c:9c:77:8a:3e:3f:02:8a:
69:ff:63:92:9d:07:13:4c:ec:18:50:bc:43:a8:f1:76:35:ce:
6e:ec:28:60:ab:f0:a3:c3:ce:bb:3b:9b:01:b3:8f:19:65:98:
07:68:ce:8a:81:41:71:42:16:06:81:db:31:dc:a8:18:d7:e7:
a9:1c:94:f6:dd:06:f7:4e:a2:46:5f:ed:f7:e5:66:7c:e8:3d:
f6:13:17:02:28:05:84:b4:f7:7e:e1:30:ef:98:07:69:8b:4f:
5f:01:0d:63:5c:c2:60:12:64:a1:62:7b:bb:2e:3b:d0:0f:7c:
8f:da:75:ee:94:77:7b:7f:5a:b1:68:e7:ac:ad:0a:b0:f4:af:
07:1c:16:a6:20:14:b5:60:38:94:db:5b:c8:82:02:b5:b1:66:
c8:ee:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:31:14 2026 by rpki-client