Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer (raw, json)
Hash identifier: OSv2GhQZDD+IX7qcDxcF7uaXgyvM2JojlEy76QFy828=
Subject key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 760C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:54:23 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 137.83.12.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30220 (0x760c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:54:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:fd:0c:98:12:91:91:ca:fc:97:4d:3d:43:
bc:bb:c2:55:75:a7:7b:8b:bb:c2:6b:aa:e8:9b:40:
08:98:2f:7b:f4:e8:3e:fc:08:a1:75:3e:3a:76:fe:
7b:76:33:5c:db:ed:23:af:cb:65:4c:e1:86:6d:09:
db:b8:46:03:15:94:0e:34:74:2c:dd:48:ea:40:f5:
97:54:df:0c:d2:b0:37:8d:6c:9f:3f:65:a7:76:1e:
5d:be:fb:67:09:94:c8:1d:b9:b8:e5:a9:a0:52:d5:
ca:31:63:14:88:62:02:17:88:33:6f:a7:3b:47:f2:
48:5f:27:4d:ae:c2:69:59:52:f2:ea:aa:43:15:22:
b3:88:86:75:99:be:af:b7:86:4e:a6:69:67:54:53:
36:35:b1:6b:3e:d5:45:a7:35:9c:1b:1e:91:bd:7d:
e8:eb:2d:86:4c:3c:fe:2d:b5:b8:4b:54:19:12:96:
2e:52:3a:eb:b4:9f:9a:5f:8d:78:43:cc:10:8c:20:
63:d0:23:58:21:36:6d:55:69:63:76:0b:5e:3d:e4:
43:a4:80:e4:ea:f0:a6:ec:15:61:18:e9:46:9b:42:
03:c7:ec:41:cd:c6:9e:d2:86:4e:05:57:2e:78:a1:
32:3b:13:b3:f4:51:d1:27:4d:c2:4f:06:3f:bc:3b:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:71:71:43:df:d3:d4:df:62:66:06:42:4e:ca:f9:f9:85:08:
49:83:e6:aa:29:34:fc:23:63:0d:8b:a1:98:d9:f0:7e:70:54:
2c:6c:ac:85:86:d2:99:bd:c6:92:96:fd:9e:07:52:56:2f:d4:
fe:41:e9:f0:c8:ff:73:c2:b0:77:ff:94:10:09:83:96:f1:b4:
b5:87:31:32:95:41:9b:03:84:4b:78:6a:37:51:23:87:8d:ea:
1d:21:a6:af:27:e1:17:e9:fb:ef:0b:ee:fa:fb:ff:15:a0:1a:
e8:69:61:13:b4:d4:3f:c4:cc:fc:74:14:28:ec:72:04:d7:a8:
29:66:be:3c:2f:6b:14:44:e0:79:06:c9:08:57:7c:52:9b:a1:
2b:49:bd:53:f1:4f:55:ed:de:b0:46:1b:9a:17:d8:ea:1c:a4:
0d:9b:50:87:8e:71:61:58:ab:a2:80:71:54:ae:fa:45:fb:6b:
73:22:dc:d1:40:db:cc:b2:35:e2:bd:16:98:b6:2b:38:3a:e8:
49:18:60:12:1e:29:32:e1:63:20:6e:16:b7:8e:36:ad:a1:03:
1e:0a:e4:db:75:7d:65:49:de:13:ad:91:8b:79:7e:bd:2b:f8:
53:aa:c2:60:13:cb:29:1e:78:f3:eb:dc:2d:d2:8f:a3:d0:2a:
88:01:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:56 2026 by rpki-client