Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
File: q34sraVZrlbMJaH2mPiFCTmIifk.cer (raw, json)
Hash identifier: DykORP6nk46yPv72GRzaohYXfp/eiBaFIn0UrDzwmRo=
Subject key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7688
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:56 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 156.13.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30344 (0x7688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:56 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:9f:39:81:97:17:dd:b9:7a:2a:24:f6:fe:
26:32:32:07:34:b0:df:dd:39:17:c7:96:bf:18:0c:
64:23:cf:a0:bd:8c:78:d8:92:25:34:46:7f:f9:3e:
58:e5:29:ca:28:38:d4:a7:06:4e:8c:6b:9f:0d:0b:
29:99:5e:be:ee:a5:b7:04:fe:4c:a8:25:03:ce:c9:
de:3c:de:59:a3:ac:db:4b:87:8b:84:16:a6:4a:6c:
87:8b:a9:de:47:6b:6a:a3:0a:d9:98:ae:1e:83:7c:
1d:1c:e3:f5:cf:8d:6e:aa:d2:4c:e9:ad:d3:df:61:
1c:48:ed:56:de:a4:44:8e:a0:da:06:ce:b7:1f:d9:
fa:e2:68:db:cb:43:eb:8b:51:a4:b7:aa:3c:51:cc:
c8:0a:3d:45:ee:c2:73:73:dd:d8:df:6f:d2:5b:0f:
18:8b:6e:da:04:93:2a:f3:63:9b:a9:f7:1f:a3:55:
bb:b4:a1:f6:2f:5d:0b:e5:f5:41:d1:f6:33:0b:61:
f3:c5:2d:54:1f:d4:f4:1b:ed:4f:bd:7d:62:04:e1:
4f:c9:8e:b4:c7:9d:c0:98:ad:0a:6b:d0:96:6a:2a:
08:51:c6:4f:49:2f:3d:4e:a0:f8:27:26:00:76:a8:
de:06:43:67:be:6e:44:dc:48:7c:9d:f2:29:c4:be:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:a2:1b:a0:b3:da:10:be:8f:6a:e6:fd:d7:8a:94:46:95:78:
19:c4:e2:4f:fc:0c:22:21:57:d1:64:f5:31:25:33:10:05:38:
2a:ba:f3:a2:3c:85:62:24:1f:8e:08:55:87:2e:e1:05:9b:57:
cc:e0:9a:cd:91:ab:a5:a0:ed:38:84:c2:4d:40:c0:fe:df:35:
39:ec:45:56:3f:6d:3a:b0:b9:de:8c:19:7d:5e:c4:d4:01:3e:
25:22:41:5c:93:04:19:ca:ad:cb:ad:7a:9f:52:8e:97:45:52:
49:b7:2b:94:76:d4:77:f4:da:65:3c:b8:74:e6:59:d7:80:06:
0b:c4:d9:c8:d6:3c:07:44:a9:f2:0e:28:49:f9:ec:7a:54:55:
31:78:89:98:f0:52:cc:26:36:98:0c:9e:23:f4:7d:62:11:a7:
4c:8a:f1:be:fe:eb:5b:87:e9:cf:d8:32:49:a4:18:58:7a:bb:
a9:da:19:06:3b:53:60:11:13:f4:82:fe:4b:55:d7:2a:ba:d1:
dd:9d:50:37:d5:fa:f8:25:f6:05:05:ca:61:34:05:34:19:37:
0e:9d:eb:e0:2e:79:b1:02:11:b0:2c:92:57:85:71:ea:4b:9f:
3e:fa:1d:c2:5d:bd:ca:61:cc:1f:b1:0e:35:4a:bf:ee:b6:89:
31:a9:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:46:06 2026 by rpki-client