Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
File: QeHsF957pw-MEkF3aWN3AjclGd4.cer (raw, json)
Hash identifier: Tsxf93XluYr8AYxHFiapRo5PK4+VlodJtwxoaV49KKQ=
Subject key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 03:57:10 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.164.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32934 (0x80a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 13 03:57:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:16:cd:43:a1:30:8f:a3:e1:73:55:ab:89:
9f:c9:77:02:b7:44:06:c1:54:42:46:13:1b:82:46:
5f:80:b5:1b:48:40:3e:fe:6d:cf:50:eb:74:97:19:
cc:f4:6f:6d:d1:a3:f5:b9:bb:cd:95:a5:68:9e:07:
4a:37:ba:26:6a:73:83:58:a5:d3:79:f8:d0:6a:19:
73:6a:74:7c:72:32:6c:5d:05:3f:b4:bb:fb:11:9a:
8f:f5:f2:1b:5d:64:13:76:ed:33:4a:87:6a:2d:8d:
02:2b:0b:38:d3:86:17:41:2e:49:d4:4b:4c:07:ac:
ee:64:69:6d:b9:d9:33:9b:5e:d3:3d:13:09:69:ce:
85:a7:0a:1a:4d:de:9b:59:b8:06:24:e0:31:37:67:
4a:a3:52:32:3d:6e:82:cd:24:ff:78:54:9d:ba:b5:
66:d8:37:88:ce:42:6a:06:c1:9d:40:e2:db:97:a2:
4b:31:a0:5a:59:70:4c:a1:09:19:ec:f5:56:a3:12:
62:12:ec:12:08:d6:63:54:5f:8c:0d:23:49:54:83:
01:0d:8b:49:7e:f6:6b:4a:e6:23:37:55:ce:47:90:
72:e9:2e:66:12:ac:96:b9:48:a6:18:d7:95:4d:28:
fd:59:68:76:8e:84:c8:77:94:fa:1c:d2:cd:7a:73:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.164.0/23
Signature Algorithm: sha256WithRSAEncryption
97:19:d7:04:52:0a:9a:ca:b7:0d:0a:95:fe:e1:02:1b:87:ac:
d5:0c:b2:9b:8b:94:e4:59:d4:ab:69:ed:4a:c7:b8:6a:1d:68:
d4:29:ee:71:ef:e2:0e:f6:b0:c9:ef:ab:f5:cc:51:f2:81:08:
34:95:bc:60:41:be:c8:1b:db:75:22:8d:b8:64:7e:1c:40:4a:
68:a7:67:c3:bf:8c:17:b5:e1:ab:8c:d9:26:74:5f:26:67:4b:
d4:7a:e3:ca:38:64:73:3d:43:8b:d6:f5:94:d6:a7:5b:70:e1:
24:68:24:b9:55:da:1a:56:ab:1c:0a:3e:aa:74:2b:21:a3:ef:
46:0d:31:81:ed:85:b6:9a:cc:ea:a6:5d:40:17:52:77:8b:fa:
13:12:8e:c3:84:c5:4c:2a:e3:18:9b:73:15:9f:ea:93:48:18:
bc:9d:7f:d3:be:c4:c2:6a:d7:69:e8:d4:29:0c:d4:b3:62:3d:
96:60:d0:a8:80:f1:b9:6b:92:77:32:b7:1f:3e:8f:22:41:4d:
7b:24:e6:52:d7:9d:29:e7:da:07:8c:19:8c:b5:0a:59:9e:50:
4c:cf:a6:6b:95:9b:53:39:b4:91:6c:25:1e:d2:67:1f:8b:73:
70:b3:a5:65:7e:65:dd:c7:ab:ae:8b:96:69:b4:5c:2a:7d:6c:
f6:a5:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:13:33 2026 by rpki-client