Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer (raw, json)
Hash identifier: A1rKyKkpqBXcJzFXyKNsACTabTmEFxlnck/zkxlSWjY=
Subject key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DBE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:03:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137430
IP: 2402:40e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171454 (0x29dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:03:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:26:b6:11:31:e0:ef:ab:12:8c:b5:76:bc:
8a:cc:47:6a:87:d3:20:48:51:73:1e:3f:9f:94:dd:
f6:7e:f4:36:dd:25:d6:4a:50:e9:38:16:9d:d3:2a:
4f:d0:37:46:4e:21:16:cd:bf:ab:ec:f9:0c:35:0e:
16:56:9d:d0:3b:13:c7:42:ea:9e:c1:96:01:9f:ee:
e5:d9:89:bc:49:06:12:3f:e0:eb:70:48:e8:63:5d:
c3:f1:04:53:0e:5d:47:b6:ca:e9:a3:19:28:b4:b3:
21:e4:19:12:77:41:0e:3b:63:e0:dd:fd:4a:79:6a:
f0:b4:7c:d5:72:f9:88:ea:24:42:03:f5:18:65:14:
e8:33:82:c7:8c:5a:c7:04:ca:66:b2:67:0a:64:ec:
1f:36:39:da:fa:77:40:f2:6b:ea:87:3e:e9:e5:4c:
97:0f:09:75:09:fc:07:06:53:ee:d6:dc:97:a7:91:
b8:0f:47:9b:68:9a:99:1f:48:af:62:97:9d:34:de:
09:bc:26:50:ed:22:6d:71:d4:b3:43:da:3a:29:7a:
62:55:3b:81:77:e0:76:f4:9c:f1:9f:39:53:d8:de:
a5:93:f6:6c:dd:c8:61:b5:c4:18:23:c0:95:09:21:
65:af:1e:34:b4:c2:0c:15:a3:19:24:42:50:33:39:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137430
sbgp-ipAddrBlock: critical
IPv6:
2402:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
51:14:7d:3a:92:fb:50:93:25:c9:88:9d:b6:19:fc:f1:a2:53:
e2:46:66:5f:54:72:a7:0e:e8:fd:78:f9:6a:c8:a6:99:5b:ea:
81:e7:56:63:7a:6f:58:40:d6:8d:90:cb:a5:ef:ae:cd:21:78:
14:9d:c5:55:51:06:21:df:8c:f1:50:7e:06:0a:ed:74:01:9c:
cf:50:0e:d6:26:17:5f:47:39:a3:90:9d:48:e1:01:9d:8d:25:
c2:bc:2d:21:73:4a:4e:e7:3b:d4:10:14:b6:90:3e:1a:5b:ac:
e1:69:0b:7b:70:95:52:ff:b1:8f:24:31:1f:d4:b7:5a:bc:23:
e8:6c:35:0e:39:07:7b:b0:49:18:38:0b:53:1a:54:da:c4:04:
1c:6f:99:7e:4a:b0:82:be:05:b5:ba:b9:14:93:14:8c:0f:d3:
95:2f:6f:12:56:3c:3b:73:e0:ce:0b:5a:fb:5c:cf:88:dc:c7:
8c:5e:e2:34:7b:3b:bc:2a:f4:2f:2c:7b:a9:f7:fb:e3:bf:58:
ad:4d:cb:90:36:d6:4d:95:24:3e:85:90:af:94:a6:e4:65:1b:
a8:3f:96:e3:db:d1:62:52:dd:4c:05:fa:ac:41:80:77:6f:d0:
47:9a:85:b9:48:1a:c3:89:bc:af:d7:7f:38:64:b7:2f:ff:57:
0c:2a:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:36 2026 by rpki-client