Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
File: sQnalQV25mJneVo066kbw3qZI7Q.cer (raw, json)
Hash identifier: X/bvi3yymnqeWij3VzI+a/56v9VjZ/TnxEhj0KhhSFU=
Subject key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8287
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 07:04:33 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.242.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33415 (0x8287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 07:04:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:ae:59:15:67:a2:5d:5f:0f:fe:91:34:dd:
69:e9:5f:bf:e8:7a:ac:3c:6e:4a:5d:80:aa:86:7f:
98:4d:a6:99:9e:55:80:ba:9d:9a:fd:a3:86:a5:4d:
5a:63:aa:a9:ab:ba:a4:b3:b3:87:3d:92:7a:e6:b3:
14:d3:5d:26:6b:2d:ba:95:7d:c0:38:d6:06:f3:6b:
84:4d:76:16:3a:67:2d:21:e0:1d:de:ac:e0:f5:e6:
61:5b:5f:4b:bd:24:2d:36:7d:cb:27:0b:5a:54:17:
aa:64:7b:ea:f0:54:97:4b:a2:b5:64:cb:74:21:2b:
40:38:f0:ea:e6:76:03:39:74:cb:c1:0b:3a:c8:1b:
35:35:cc:05:d4:a5:f8:76:92:1e:3b:15:2f:b0:c8:
80:25:51:46:b9:1b:c4:1e:19:e3:fa:ec:81:bd:5d:
34:c3:af:e8:da:39:c4:bc:a0:60:56:36:f1:e6:8c:
5c:37:06:02:ef:78:88:7a:d2:f6:6e:45:2c:6b:66:
9b:ac:cb:ed:3b:cc:23:9c:d7:80:c4:ad:96:7c:53:
5e:07:e9:a0:d0:c5:d7:6a:76:e9:91:14:dd:47:42:
ef:f9:7e:1b:12:16:e4:91:a4:24:20:e1:43:45:a4:
81:5f:ff:2b:fe:99:94:e6:a9:5d:d3:e7:7d:c7:7a:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.242.0/23
Signature Algorithm: sha256WithRSAEncryption
53:56:ad:bc:04:01:9e:23:74:0e:a0:20:74:5f:ff:f7:e1:e1:
bc:0f:d4:b6:a2:58:b1:7f:c2:f4:da:a2:7f:29:70:46:61:c7:
94:fe:03:26:72:3a:aa:bf:1f:4b:ae:ea:6c:43:c5:4e:61:98:
0d:b5:03:e5:db:cc:ed:f5:bd:98:62:e8:07:8e:6a:a2:5f:c6:
6d:3f:1e:67:67:4a:9d:f3:e5:71:8f:4d:c7:46:b6:99:0a:5d:
6f:fb:bf:2a:26:e5:24:b9:d6:d5:38:45:3e:55:2d:d4:76:3a:
dc:b9:ed:b9:52:64:c3:61:e9:b2:48:8b:85:92:46:ab:ac:a2:
5e:e3:6f:68:f0:81:55:02:3b:77:35:6e:b9:56:18:85:5d:49:
34:7c:f0:c3:53:64:f7:28:f1:30:6b:05:04:c2:9f:d7:96:18:
60:dc:6e:d4:4b:ae:cd:2c:c0:47:7c:10:06:92:1d:ae:72:80:
da:17:6a:6a:9b:1a:24:60:f1:c1:31:0d:a1:2f:a6:7d:18:2b:
99:dd:67:09:51:43:f2:da:0e:7e:e7:d9:7a:d8:ce:33:d7:9e:
8c:81:49:64:67:ab:09:af:9a:f4:e7:c3:fc:8c:43:1b:d8:51:
01:5d:23:6a:76:a8:07:cf:f5:44:aa:2d:af:ab:b7:91:cb:15:
09:6e:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:49:26 2026 by rpki-client