Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
File: QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer (raw, json)
Hash identifier: E2hYbBM2kL8zVgZWHWiLuXUH9WHnI1MVMor2uns7kVM=
Subject key identifier: 41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 84A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Nov 2026 09:32:17 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 147.185.28.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33957 (0x84a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 4 09:32:17 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9154F63, serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:9f:69:12:2c:e8:9c:a2:f1:4b:fb:c3:86:
c9:66:06:ae:d0:7a:31:70:c0:4d:9f:21:9a:ba:dd:
80:4d:62:df:bc:9e:96:f3:9c:6c:dd:1f:fa:1b:6d:
31:06:f3:d6:97:67:fe:6e:2c:d4:b1:c5:71:81:e7:
a2:43:f1:3c:3d:13:b5:ca:64:27:09:ad:ae:8f:ec:
82:47:fd:86:02:98:32:af:4f:33:e5:02:69:15:33:
e9:27:59:c6:50:63:f3:9d:24:e6:6c:ef:b9:fc:22:
77:9f:15:bd:2c:c4:ff:61:19:75:50:cb:03:71:eb:
7e:56:bb:8d:d0:25:ea:35:67:5d:61:5c:52:e6:15:
2d:98:c8:c1:ba:f3:3f:ae:34:9a:a8:b1:85:db:74:
6c:dc:31:d4:67:4d:a5:c6:c9:4f:2f:f9:55:58:80:
97:24:85:6a:20:d5:3c:80:a1:e2:06:77:59:6b:ab:
8d:43:d7:13:b9:6a:3b:1d:46:7c:d6:57:0f:04:9e:
ef:a4:5f:bc:c2:0c:74:8a:1b:0f:93:f7:a0:28:65:
a6:a3:13:b0:1c:70:30:8b:3d:d0:f6:40:9f:10:ad:
28:ce:98:9b:08:86:55:45:df:2b:e9:e5:9e:79:41:
3c:07:7e:79:86:20:34:4c:8c:d1:b6:65:c9:72:43:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
66:61:bf:f7:82:f6:19:25:9e:27:26:2a:c1:ea:35:f4:2e:56:
fe:33:2e:d0:ea:c1:3a:bc:97:e6:ca:aa:55:d5:c3:da:ae:be:
68:f1:d3:d3:6f:a4:7a:f1:28:70:e6:ec:b1:c3:fe:d9:a9:29:
1b:17:e7:7a:b3:84:f3:f3:82:75:f9:a2:95:7b:1c:a6:22:5f:
f5:87:99:da:f5:a2:23:b2:57:89:d1:1f:50:93:19:89:3d:a4:
a6:de:15:94:ae:64:b3:56:87:70:75:3f:ec:84:12:09:66:89:
c3:e0:7a:79:77:16:f5:05:00:fa:9a:69:c6:20:2e:d6:dc:93:
43:f3:66:0b:c1:c0:05:c7:dc:ca:2e:ad:55:09:6e:a3:8a:70:
b3:6a:06:7c:d5:60:67:9f:7f:7f:c1:77:02:45:e6:24:dc:e9:
f0:c4:79:ae:7d:22:17:d2:36:2b:7c:e0:de:11:9e:5d:2c:6a:
66:a2:77:a4:26:f3:50:97:b6:5d:12:8d:6e:ad:2f:75:96:e2:
a3:b1:a7:f0:84:42:bc:ff:dd:de:c4:03:3a:b8:2e:50:f6:ca:
97:a2:d5:0a:5e:88:38:b0:1f:fa:a5:0e:32:80:78:68:55:a7:
e8:00:e7:72:ea:ff:0e:a2:4a:1c:32:68:46:00:36:84:42:ca:
7e:76:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:37 2026 by rpki-client