Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer (raw, json)
Hash identifier: EJ3D+Bb/Er0aFO7l8xjBNCGRXIw5bQYg2UvZdHr2DWM=
Subject key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D64
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 23:04:52 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.160.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28004 (0x6d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 3 23:04:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:e2:2c:b9:e4:f0:3b:02:58:83:9c:03:9c:
85:ad:f0:17:b5:3f:58:91:ec:e6:c5:ea:17:52:7c:
70:ce:89:44:3d:f6:bb:4a:7d:df:61:97:7a:65:94:
02:32:94:8d:d7:e9:58:9d:c0:7a:a7:0b:40:c7:78:
2f:cb:99:da:fc:b9:84:a3:3f:a1:19:62:77:db:bf:
78:a4:66:dd:56:c1:aa:30:3a:86:7c:8a:9a:c7:51:
e4:c1:00:61:98:85:5e:21:9b:6c:3d:d3:80:c2:6c:
11:32:d6:64:ef:fd:79:09:39:c0:75:c8:a9:d4:3a:
78:e4:16:bc:63:9a:e2:7d:ac:98:d4:fc:53:0e:7e:
d9:cb:52:f1:d5:02:4f:71:0b:9b:92:31:29:35:3a:
3d:83:a1:25:ab:c8:59:e9:b1:1c:18:53:41:b2:4e:
16:03:dc:41:92:e3:5b:cd:9f:3d:c1:94:ad:5c:74:
5b:9f:82:c6:2e:f2:db:0e:27:db:e7:af:f4:b2:f9:
38:f3:db:26:3d:96:32:a8:a9:9c:6d:6f:14:a7:6d:
ea:4d:d5:42:32:bf:4e:d3:37:5d:a1:aa:ea:8f:33:
05:fc:b5:30:68:6a:eb:ee:c4:56:79:64:45:96:db:
33:1c:0c:c9:f6:37:0f:d1:48:db:b7:cd:75:27:2e:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.160.0/23
Signature Algorithm: sha256WithRSAEncryption
58:c4:b5:3a:e7:e3:ba:22:71:d4:8c:fc:ba:be:67:c0:e5:f5:
29:90:9f:b1:03:57:85:3d:26:56:01:aa:54:22:6f:2c:17:37:
1d:d0:70:a1:68:2c:de:1f:bc:17:03:61:cc:bb:b7:4b:3e:1f:
9e:dd:ac:56:d3:72:ba:51:54:d3:ef:8a:fb:90:9d:67:64:d2:
f4:85:ce:61:94:a6:11:0a:07:6c:b5:d7:6a:ae:ee:97:cf:16:
c9:5d:2a:ac:7f:c5:9d:58:5c:f5:6e:e4:c0:15:f9:80:7d:76:
44:b6:8f:30:f1:5e:70:28:ff:49:94:fe:55:df:b4:84:ad:df:
57:8a:8a:d4:b0:15:91:96:55:63:cd:58:14:ba:55:8a:a2:4d:
c6:51:a4:ac:11:e4:5e:fd:0a:2c:02:3c:3e:f1:09:73:5f:23:
a5:b8:70:ca:98:b4:54:5f:5f:e6:3c:16:53:ea:c2:84:6e:02:
b9:c5:26:cf:bb:75:d2:44:d7:f1:46:23:02:47:16:4f:35:6d:
3a:4e:02:0b:ce:03:de:47:2b:1f:17:d1:65:6f:cb:36:58:f7:
27:9c:06:01:11:51:be:69:19:05:d5:8d:ef:68:1e:b4:ff:1d:
4a:41:07:b7:b9:7a:51:de:a2:f3:36:5b:87:b6:76:61:fe:eb:
10:81:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:34 2025 by rpki-client