Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer (raw, json)
Hash identifier: WPe1bcFq5hOA9JL+Tk16af1tW6yAH/qqFeWALEyLepo=
Subject key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C490
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 Jul 2026 13:30:21 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 141172
IP: 2001:df3:d0c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 00:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181392 (0x2c490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 12 13:30:21 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:a0:d2:91:c9:b9:1e:3a:73:3f:de:57:dd:
5f:f0:62:7f:c6:89:48:17:29:a5:33:79:4f:bf:a0:
9c:e6:b3:2c:26:df:0e:9a:87:aa:cc:de:4a:29:d1:
f4:6f:c8:e1:e8:12:9a:89:d9:6f:52:b4:d0:77:65:
7a:f9:92:d5:7e:55:eb:f9:03:9d:c4:38:cb:c7:08:
66:91:f9:0c:78:77:cb:4b:59:eb:04:b4:8f:39:af:
b3:a7:ad:47:77:7e:1d:2c:6d:4e:6b:f4:d6:e8:ca:
48:01:72:ec:2e:b1:ae:30:ec:52:a9:af:44:e8:75:
f7:f3:a3:a6:71:2b:1e:74:b8:27:d2:f3:33:a8:8f:
90:c6:a6:dc:e2:ec:61:33:ae:cd:81:d0:08:b7:8f:
b8:1f:ee:f9:4e:eb:e2:e1:0d:8f:16:a2:c5:cd:d3:
6b:0c:b0:c8:72:e4:73:f7:cc:9a:2b:68:23:2c:de:
43:f4:fd:a5:ec:32:02:1f:d2:59:5c:24:0a:30:43:
f2:9f:20:47:a6:a7:e2:03:5d:c4:68:03:ec:42:3e:
d8:5a:44:7b:4e:e6:da:e2:cc:a9:d5:fc:0f:e3:da:
45:92:bc:25:32:d7:fd:b4:71:d8:1c:7f:00:4d:99:
b5:b1:dd:51:33:ca:ae:43:4b:ad:c7:6c:ae:b5:65:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141172
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d0c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:7b:7a:41:b2:e5:29:d5:dd:ce:28:0d:7e:26:00:45:99:03:
0f:23:53:fb:3c:1e:fb:1c:ae:bd:67:76:01:da:15:d6:c6:4f:
c0:b4:6d:07:fa:5e:5c:ce:28:02:25:c6:0d:f1:d3:e8:6a:e4:
24:c0:b3:35:d2:4f:4a:0c:83:56:c4:b2:c6:23:fe:b3:dd:4c:
19:d5:72:d3:74:9f:b3:de:99:82:d1:33:15:d1:1d:06:6b:08:
0e:64:c7:c1:13:99:72:f7:8a:f0:1e:01:e0:a2:f2:0b:db:0b:
84:22:b2:1f:31:87:8b:e7:71:5b:fd:2e:f5:68:c4:77:d0:1a:
0e:64:12:37:41:8d:91:b2:a6:1a:0a:6f:45:be:6d:c7:8b:79:
90:5c:0d:0d:18:96:2b:d5:36:08:27:62:24:9c:0e:43:51:bd:
4e:9e:7e:14:50:de:cc:41:8c:bc:18:8e:e6:4f:c5:4a:51:24:
c5:51:1e:37:03:9e:9a:43:b2:3d:ab:a6:a7:74:f2:b5:fa:08:
09:bf:3b:24:73:6f:cd:3f:10:55:1a:7b:a9:05:f6:b5:68:86:
96:74:75:17:5d:58:be:11:54:8f:d5:44:92:cd:50:f7:88:51:
5d:10:1b:95:87:c9:bc:b8:da:41:9e:5c:f9:68:9b:e0:7b:34:
b1:aa:19:d1
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAsSQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxMjEzMzAyMVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0
OERBMDFEM0YzNzU0NThEMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAqKDSkcm5HjpzP95X3V/wYn/GiUgXKaUzeU+/oJzmsywm3w6ah6rM3kop0fRv
yOHoEpqJ2W9StNB3ZXr5ktV+Vev5A53EOMvHCGaR+Qx4d8tLWesEtI85r7OnrUd3
fh0sbU5r9NboykgBcuwusa4w7FKpr0Todffzo6ZxKx50uCfS8zOoj5DGptzi7GEz
rs2B0Ai3j7gf7vlO6+LhDY8WosXN02sMsMhy5HP3zJoraCMs3kP0/aXsMgIf0llc
JAowQ/KfIEemp+IDXcRoA+xCPthaRHtO5trizKnV/A/j2kWSvCUy1/20cdgcfwBN
mbWx3VEzyq5DS63HbK61ZQGXAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUsq1Q81cb
2h7sB8xI2gHT83VFjSQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFN0M3LzFBNTlGNzhFMTZCMzExRUY4OUNGRTMwRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFj
YjJoN3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAid0MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN89DAMA0G
CSqGSIb3DQEBCwUAA4IBAQAze3pBsuUp1d3OKA1+JgBFmQMPI1P7PB77HK69Z3YB
2hXWxk/AtG0H+l5czigCJcYN8dPoauQkwLM10k9KDINWxLLGI/6z3UwZ1XLTdJ+z
3pmC0TMV0R0GawgOZMfBE5ly94rwHgHgovIL2wuEIrIfMYeL53Fb/S71aMR30BoO
ZBI3QY2RsqYaCm9Fvm3Hi3mQXA0NGJYr1TYIJ2IknA5DUb1Onn4UUN7MQYy8GI7m
T8VKUSTFUR43A56aQ7I9q6andPK1+ggJvzskc2/NPxBVGnupBfa1aIaWdHUXXVi+
EVSP1USSzVD3iFFdEBuVh8m8uNpBnlz5aJvgezSxqhnR
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:16 2026 by rpki-client