Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
File: sQnalQV25mJneVo066kbw3qZI7Q.cer (raw, json)
Hash identifier: aARpvXNlnIOSYXlj+YcccSW5TdhfvDMKbo0qXvd17Ks=
Subject key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 08:51:01 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.242.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27800 (0x6c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 21 08:51:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:ae:59:15:67:a2:5d:5f:0f:fe:91:34:dd:
69:e9:5f:bf:e8:7a:ac:3c:6e:4a:5d:80:aa:86:7f:
98:4d:a6:99:9e:55:80:ba:9d:9a:fd:a3:86:a5:4d:
5a:63:aa:a9:ab:ba:a4:b3:b3:87:3d:92:7a:e6:b3:
14:d3:5d:26:6b:2d:ba:95:7d:c0:38:d6:06:f3:6b:
84:4d:76:16:3a:67:2d:21:e0:1d:de:ac:e0:f5:e6:
61:5b:5f:4b:bd:24:2d:36:7d:cb:27:0b:5a:54:17:
aa:64:7b:ea:f0:54:97:4b:a2:b5:64:cb:74:21:2b:
40:38:f0:ea:e6:76:03:39:74:cb:c1:0b:3a:c8:1b:
35:35:cc:05:d4:a5:f8:76:92:1e:3b:15:2f:b0:c8:
80:25:51:46:b9:1b:c4:1e:19:e3:fa:ec:81:bd:5d:
34:c3:af:e8:da:39:c4:bc:a0:60:56:36:f1:e6:8c:
5c:37:06:02:ef:78:88:7a:d2:f6:6e:45:2c:6b:66:
9b:ac:cb:ed:3b:cc:23:9c:d7:80:c4:ad:96:7c:53:
5e:07:e9:a0:d0:c5:d7:6a:76:e9:91:14:dd:47:42:
ef:f9:7e:1b:12:16:e4:91:a4:24:20:e1:43:45:a4:
81:5f:ff:2b:fe:99:94:e6:a9:5d:d3:e7:7d:c7:7a:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:8c:23:43:f0:fd:2a:b1:e6:97:03:02:58:33:db:69:52:e0:
c7:74:dc:d8:7b:b0:84:63:ff:37:05:51:92:64:81:9e:09:d4:
e4:ab:5f:03:4e:86:36:0e:08:f8:88:0f:f4:83:d2:9f:37:e0:
00:d8:2c:e2:cb:d7:e5:84:9e:5c:08:ee:b1:06:18:c8:1d:6d:
03:9b:f5:14:a6:47:b3:de:df:f7:1f:b2:78:f6:d1:2d:36:f4:
8e:b7:dd:b8:ad:99:00:7b:a6:6d:02:22:36:6a:4e:0e:d0:c9:
56:a9:5d:51:31:f8:b4:3d:08:e3:b9:7b:5f:46:7c:8f:3c:d5:
d2:96:4f:7f:91:13:63:21:c7:26:5e:c9:18:7c:a3:fc:e9:c5:
03:62:d9:a8:b8:de:df:5a:b0:93:f2:24:06:33:25:41:67:79:
13:72:68:93:6d:00:6d:6a:da:e0:e9:66:03:e2:21:df:6a:d9:
8e:62:72:41:22:7d:ea:fe:21:a4:c0:6d:70:9c:12:cf:b9:ef:
00:67:d5:2d:dd:50:b8:87:34:98:7f:b1:b8:a8:fa:4e:35:0b:
4e:e3:0b:b0:b7:ca:94:8b:98:4c:dc:cb:4f:24:18:18:a7:bf:
36:2a:67:62:13:da:f3:27:20:98:b2:34:e3:5e:fb:57:cc:c6:
54:e9:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:56 2025 by rpki-client