Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
File: qCkvYgTIIT15H6bMqvV4UZTvgaA.cer (raw, json)
Hash identifier: xOZXD0ziiXBYOLnBBmpcRdWD8jVV+5YPtFKOLNj6s9M=
Subject key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:10 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.247.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30153 (0x75c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:10 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:3a:ea:2f:e1:6f:45:66:f9:b7:f2:e6:c1:
94:6e:33:e0:63:19:4c:70:3f:54:fe:38:7d:cd:73:
8c:a0:fa:df:6a:1e:28:cc:f4:e2:84:24:d2:3d:e0:
c7:57:4b:f5:60:23:03:d5:9a:1e:fa:3c:af:68:ee:
db:5b:82:68:e0:68:94:ab:55:16:e2:83:55:32:3a:
b2:a1:78:d5:05:2b:11:f6:2c:bb:5a:a5:28:99:e4:
65:4f:bc:bd:62:f3:74:56:5c:ee:4a:85:d5:61:8c:
0f:ec:0d:72:66:da:f0:eb:0e:68:5c:0d:03:29:4a:
4d:da:b1:74:8d:af:44:74:20:05:6b:9a:bc:70:d8:
df:75:fd:29:ee:a1:8a:40:a6:f2:0f:cc:f6:d3:73:
b0:09:90:2c:60:73:73:ec:4e:26:0c:a0:94:77:bf:
06:69:eb:a1:17:4d:d3:4e:d2:7e:cb:e2:dd:3e:2d:
67:16:45:ed:65:0b:a6:e6:40:de:2c:9d:91:64:59:
76:d4:b3:a9:85:f0:91:91:74:65:9e:15:aa:01:a4:
d3:9c:1a:47:d7:64:b9:88:0d:da:0d:39:f0:3e:fe:
f9:14:d2:29:c6:a3:f4:c5:f7:5e:8d:28:53:40:30:
c7:4a:c6:5c:3d:6f:48:de:87:ef:59:ed:83:b2:4f:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
08:85:f1:2e:99:7e:d8:f9:09:00:1e:b3:d8:1f:17:f5:99:a0:
db:69:35:49:ab:35:75:33:13:ca:45:f7:5d:e1:ff:29:b5:56:
82:54:a8:29:d0:b4:6a:7e:76:84:21:88:37:3b:96:99:f7:32:
1f:e5:df:0b:6f:41:95:e0:76:cd:86:9f:36:ba:eb:78:ff:08:
db:2b:a5:e1:f9:21:7a:21:77:f4:e3:c4:8b:ce:f9:fc:a3:c3:
6f:4c:0d:cf:b2:8c:28:a2:ef:b4:c8:3d:4b:28:50:f2:2d:2a:
3c:cb:96:c0:97:4c:fd:83:cf:78:17:7b:38:71:cb:f1:ab:5c:
80:28:26:ba:36:d3:26:66:ef:7c:e4:ba:3a:7c:12:a7:22:07:
1c:4e:33:64:cd:0a:a3:be:78:8b:37:9b:56:a7:1f:68:3c:2c:
8c:8a:e3:cf:e4:14:1b:fc:81:34:2e:43:9c:6b:d0:83:9c:40:
05:68:fa:3c:2f:a9:fb:26:36:5c:9b:75:6e:27:04:85:93:af:
da:5c:c1:df:f5:64:14:de:46:ab:1c:60:16:d1:4d:36:88:2f:
d1:fd:44:8a:1c:ff:fd:0a:00:58:ae:6f:79:ff:cb:49:98:dc:
a0:3d:1b:66:43:5b:75:f1:65:66:fa:9f:5b:4e:9c:31:03:e8:
79:21:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:38 2026 by rpki-client