Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
File: tqxYfsJ9U17PTY_eFxF2V52vTU8.cer (raw, json)
Hash identifier: RuXcvcRgBg7fFDteUrsUpt6O2gUnQ37hbIymaCXozHs=
Subject key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 750A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:48:54 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.232.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29962 (0x750a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:48:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:88:6a:57:0a:58:d2:15:c7:7c:ce:36:10:
f6:94:5b:bf:86:11:4f:1c:6a:76:2c:b0:87:01:68:
9a:34:b5:bd:64:c3:80:53:f8:14:c6:ee:24:a5:7a:
6c:f5:ba:a4:f5:b4:c5:db:35:82:5f:00:40:63:7d:
89:77:c9:15:c5:62:b8:da:74:c1:f0:79:81:01:46:
e6:ba:a9:2d:09:7a:49:25:08:a6:64:21:93:16:d5:
33:30:44:6b:2f:d0:76:af:a7:ec:42:29:d5:41:f7:
09:b1:37:84:2b:08:50:b2:10:b3:28:16:16:73:89:
6a:46:b1:d1:c8:df:70:a2:8e:25:31:ce:46:3d:23:
23:f5:d1:b5:18:ab:e1:9d:3f:a3:69:25:79:cb:d0:
71:13:4d:9a:3a:43:2d:0d:65:82:7a:b6:d3:b8:8c:
86:6d:a5:f2:6e:e4:1c:53:b4:d8:dc:da:94:14:92:
f1:56:06:ad:7f:95:08:96:4d:bf:51:f3:60:4b:0b:
77:ca:ba:91:38:b2:c5:b1:05:89:db:53:45:61:32:
f2:be:50:be:8d:af:d9:98:28:54:90:19:84:3b:ed:
07:65:9e:9e:a6:f0:26:b3:e8:5e:6d:bf:ff:4a:42:
cc:1d:a5:78:3c:b5:26:1b:a0:64:9b:23:fe:c8:31:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0f:9f:7d:a5:ae:bd:e4:6d:a9:27:09:8b:b2:2d:7f:3a:01:
5e:18:bb:81:5e:56:a2:78:33:ed:41:43:c3:da:99:59:73:4e:
fd:3a:13:fc:17:bb:41:d4:01:5b:91:66:94:a0:06:b0:24:46:
63:c3:18:b9:6d:66:d4:bc:9b:29:97:8f:ed:b8:88:b7:c7:92:
6e:ee:00:49:3a:96:95:01:7c:a4:9c:cb:4a:e6:f1:01:ff:42:
ec:e4:93:2f:86:ac:9a:63:b7:ae:43:72:22:40:44:7c:11:da:
e2:aa:0f:65:c1:f6:a1:ae:f2:e6:f4:8a:0f:d4:9a:03:f2:b0:
21:83:71:a0:48:13:1b:e2:21:ea:55:d4:43:72:76:85:92:41:
80:98:2e:c3:60:0c:89:04:8e:43:2e:71:6d:33:ca:e1:02:62:
a2:49:ff:1d:d3:64:5a:a1:f2:05:6b:6e:a3:75:24:81:0d:d9:
ad:5f:b1:d6:5a:f1:19:0a:a2:c3:e2:90:3a:9c:59:ac:ab:db:
ee:9a:c2:af:32:18:63:8c:8d:f3:37:1a:8c:0f:bf:ba:a4:9d:
0b:b5:25:85:71:2b:1f:9c:c1:a6:22:bc:aa:2e:8d:98:ef:c7:
8c:0b:3b:14:1b:f0:42:22:8a:f6:f7:c0:bc:94:5f:f8:29:72:
4f:15:75:d4
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI0ODU0WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRF
MTcxMTc2NTc5REFGNEQ0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMF3iGpXCljSFcd8zjYQ9pRbv4YRTxxqdiywhwFomjS1vWTDgFP4FMbuJKV6bPW6
pPW0xds1gl8AQGN9iXfJFcViuNp0wfB5gQFG5rqpLQl6SSUIpmQhkxbVMzBEay/Q
dq+n7EIp1UH3CbE3hCsIULIQsygWFnOJakax0cjfcKKOJTHORj0jI/XRtRir4Z0/
o2klecvQcRNNmjpDLQ1lgnq207iMhm2l8m7kHFO02NzalBSS8VYGrX+VCJZNv1Hz
YEsLd8q6kTiyxbEFidtTRWEy8r5Qvo2v2ZgoVJAZhDvtB2WenqbwJrPoXm2//0pC
zB2leDy1JhugZJsj/sgx2VMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS2rFh+wn1T
Xs9Nj94XEXZXna9NTzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjFBOTUvOEM0NEE5MzQyQkQ5MTFGMEFCNDQzMTIyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYxQTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5
VTE3UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKH46DANBgkqhkiG9w0BAQsFAAOCAQEAOg+ffaWuveRtqScJi7It
fzoBXhi7gV5Wongz7UFDw9qZWXNO/ToT/Be7QdQBW5FmlKAGsCRGY8MYuW1m1Lyb
KZeP7biIt8eSbu4ASTqWlQF8pJzLSubxAf9C7OSTL4asmmO3rkNyIkBEfBHa4qoP
ZcH2oa7y5vSKD9SaA/KwIYNxoEgTG+Ih6lXUQ3J2hZJBgJguw2AMiQSOQy5xbTPK
4QJiokn/HdNkWqHyBWtuo3UkgQ3ZrV+x1lrxGQqiw+KQOpxZrKvb7prCrzIYY4yN
8zcajA+/uqSdC7UlhXErH5zBpiK8qi6NmO/HjAs7FBvwQiKK9vfAvJRf+ClyTxV1
1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:13 2026 by rpki-client