Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer (raw, json)
Hash identifier: 5vbIJSJ3PImpHd6Us8L5vxeVEoiYSndPREbKEPhorJA=
Subject key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7573
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:22 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.52.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30067 (0x7573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:22 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:96:c8:0d:8f:60:85:b9:97:02:d5:77:97:
c3:cb:3b:bb:26:4a:f3:11:18:aa:91:32:30:b4:e7:
ce:71:a1:11:e0:3a:0c:d2:27:36:6a:98:25:ec:61:
31:48:28:04:ee:18:e7:71:d7:9d:a7:ef:ac:67:57:
c0:b8:7d:11:2d:a9:fa:77:07:0e:c9:41:a9:e9:66:
05:36:9d:a5:e9:57:cf:89:08:cd:d1:f9:3d:e4:e6:
f6:02:ab:78:f7:54:0d:44:09:39:b7:b6:77:27:8a:
c5:41:32:6c:a9:00:2d:9b:66:6e:86:e0:55:31:74:
db:ce:5f:99:44:ef:f3:e7:de:96:b7:b2:fa:9d:f2:
14:89:55:f5:3a:71:c7:fb:b2:ea:76:14:df:e8:99:
bf:73:81:ad:d4:ee:df:2c:d9:d1:ef:79:df:19:c2:
3d:81:9b:f5:ce:52:3d:62:df:1c:34:a3:cd:53:be:
e2:71:a5:53:fb:cb:58:dd:02:54:e3:d1:3f:10:42:
85:51:ec:4a:dc:60:f2:72:ca:54:87:38:aa:a7:e2:
01:81:8e:d7:67:89:8f:59:05:c8:12:b1:32:ac:71:
0c:c1:1d:5d:4c:13:21:4c:05:69:0a:51:66:ff:ce:
aa:31:24:a1:ae:49:66:09:6b:2d:ac:1a:c2:d4:68:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.52.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4c:95:67:d0:da:92:76:18:04:cc:dc:84:fb:6c:1f:87:2f:
cc:4c:7a:cd:2b:0d:82:47:27:6d:59:d7:5c:7a:17:8b:11:56:
59:6a:53:57:d4:5e:5d:26:16:c0:d4:95:de:1f:fb:ad:94:13:
5c:89:55:eb:8b:32:0d:9e:26:2f:0c:e5:4a:54:fb:ae:7c:d0:
51:0c:cc:04:e4:31:cf:f9:d2:6c:a8:e4:af:76:81:d6:8b:de:
15:c0:46:5a:dd:fe:bd:19:11:64:25:68:69:bf:85:29:7f:af:
e4:38:52:22:6e:26:39:59:58:01:06:7d:1d:13:46:1d:f5:83:
23:37:bd:f5:f4:e7:78:86:7c:5c:51:32:a8:c3:e0:be:f3:1a:
c2:d8:b2:b0:dd:dc:c4:d8:c6:5c:a7:f7:7e:f6:22:2f:9f:7b:
de:b7:3f:30:af:3f:5a:65:08:c4:f0:20:4c:6e:13:44:c7:42:
a2:35:60:b8:9e:cb:21:29:56:01:a2:a7:5a:a1:bc:77:5e:21:
9c:5d:3e:9b:26:0e:cf:38:a3:5e:c7:d6:d5:74:a4:dd:3d:5f:
bc:04:37:d0:84:6b:0a:23:ed:19:f2:cc:dd:f4:c4:ff:e2:d1:
26:64:1c:eb:f4:a0:c6:3d:33:a9:b0:80:ca:36:e1:a0:d3:fa:
bb:ac:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:48 2026 by rpki-client