Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer (raw, json)
Hash identifier: 0AIaXoZiMSTptC9XsALI++QhUKFh0OjwQxsX2Y+GOXw=
Subject key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7497
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:39:20 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.94.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29847 (0x7497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:39:20 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:1a:48:89:05:08:17:35:21:da:0f:c4:4a:
02:ce:6d:35:40:33:be:bd:d4:6d:ce:6f:e1:4a:39:
f7:e0:b5:0d:7c:c2:7a:74:1b:ca:72:c9:58:d9:15:
5d:4d:90:8b:06:e5:eb:07:e4:ac:7a:36:ce:ea:11:
ee:78:ec:99:54:12:76:ed:c0:67:c1:ff:17:b3:06:
57:58:9b:9a:92:34:2f:57:42:0b:24:a0:20:a6:07:
97:1d:97:de:5f:5b:56:37:6a:50:36:cc:81:d3:cb:
54:b9:42:ba:77:df:b8:c1:a9:d2:1a:0b:22:f4:f2:
1b:7a:11:4d:57:69:10:c2:da:75:f9:ea:72:9e:cd:
47:16:6b:de:9c:0e:60:ba:77:fb:09:d9:63:ed:86:
f5:9a:0d:15:0b:d4:d9:70:df:46:25:55:0b:74:75:
fb:ad:00:45:cf:b6:4b:76:f9:04:6e:50:6c:c8:f2:
71:d2:ad:50:3d:60:34:eb:e7:e3:f0:26:09:11:8a:
ff:19:64:d7:63:64:98:12:e8:7c:82:09:39:c9:75:
e8:2f:2a:27:57:91:df:d0:a9:f8:9d:fa:a9:f9:81:
55:ba:ef:2c:30:ce:27:ae:78:79:f8:7c:89:06:7c:
58:7d:e5:00:3c:7f:bc:7c:26:95:8f:48:7c:4a:c5:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:00:59:3a:ac:e4:4b:d9:4c:37:97:a1:fe:27:4d:72:4b:10:
2b:36:53:1c:0c:83:d4:e5:a9:a8:17:42:1a:33:48:f5:5e:69:
b1:e0:07:6e:f8:1e:9f:c5:73:3c:21:24:d7:c8:7a:03:e5:b7:
63:12:1b:1c:be:4e:e2:1f:57:a1:f1:a1:d4:e0:a4:e3:b2:0c:
4a:09:9a:12:14:f6:e4:a9:07:05:91:bb:64:cf:6e:ba:b8:50:
d2:f9:e6:ce:b6:9b:22:e5:7c:0a:6c:16:5f:29:ef:64:30:8f:
a3:72:c6:b1:4c:41:69:ce:50:31:5c:58:2a:5c:07:77:10:26:
9a:9a:f2:55:08:d7:c1:a5:07:d1:bb:29:61:78:b1:ba:57:ce:
6c:7d:26:a6:d2:63:4e:d0:5c:36:c0:a9:e9:00:12:22:6e:e4:
1b:3f:6d:0e:b9:1d:48:d7:8b:7a:55:e8:87:cc:19:fd:28:54:
6d:91:0a:e0:c3:5a:0e:10:c2:b8:45:e1:ae:54:51:10:d5:3f:
11:34:99:7f:78:91:ec:54:d3:c9:28:42:e6:45:fc:fa:e5:ba:
f0:87:e2:c9:af:e7:56:09:19:52:f0:2b:ac:b6:d4:ee:b2:e6:
b6:4f:a3:d3:f8:5f:b6:3e:26:a2:86:31:5e:7b:dc:18:38:3b:
98:97:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:15 2026 by rpki-client