Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
File: QQmhbhhypDGvWRhmVbtg1TN8pIU.cer (raw, json)
Hash identifier: FksFhPF2n8vW6BdaqmbE3NfiA/yULK+LImPLK3wnUws=
Subject key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026ED0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Oct 2025 17:51:17 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.76.144.0/22
IP: 2407:6d80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159440 (0x26ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 17:51:17 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:21:a3:ee:22:3b:34:89:c0:6c:66:db:5a:
94:cb:79:ea:1c:2d:82:44:0d:63:ea:dc:64:22:c0:
36:d2:ad:c3:21:62:39:33:0f:d3:3b:e5:7a:7f:9c:
11:b9:1b:55:8f:9d:34:dd:96:b0:a5:c2:29:05:5d:
1e:e8:4f:30:fc:7d:d4:66:27:db:0c:c9:1d:3c:c5:
8d:30:65:a1:6d:48:fa:ca:f4:b9:9f:bf:6f:0f:f3:
2b:df:75:08:36:a7:e3:67:de:e2:f6:de:2b:3d:94:
ad:a7:62:37:aa:36:f9:df:26:4f:a5:89:06:82:e6:
b7:6d:c3:f5:9d:ff:bf:6a:e4:a4:9f:26:f4:07:6b:
84:2f:54:e5:b5:04:93:b6:8f:d1:1e:4d:43:83:aa:
e9:95:dc:a3:b4:40:5a:e9:ca:57:a8:5b:95:3c:d6:
0a:53:fd:73:f8:ac:52:bf:ad:35:96:23:ad:9d:d7:
88:bc:15:75:8d:37:0d:ff:5a:03:7e:36:36:c7:01:
77:81:41:90:55:b6:11:69:68:78:7a:c8:fc:b0:e2:
42:29:75:c3:d2:28:8e:30:74:c4:73:ba:eb:70:56:
0d:e0:a9:a0:68:ea:6c:be:a7:bf:80:c7:29:3a:38:
3d:bd:a0:ba:08:9a:35:0a:99:f9:14:cc:2f:13:a2:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.144.0/22
IPv6:
2407:6d80::/32
Signature Algorithm: sha256WithRSAEncryption
1f:08:d9:1c:70:b9:86:01:2e:38:7e:70:af:82:c0:91:22:b6:
c7:07:da:b8:b1:83:e3:b6:91:cc:91:b5:6e:58:65:81:5b:72:
8d:8b:12:99:8b:b3:c2:e4:5d:d1:d8:ff:0d:e1:b2:1a:d7:ac:
2a:68:98:3e:e1:89:47:7c:d8:f7:14:8f:32:19:8b:b9:3a:3f:
63:f9:d7:c4:ba:b0:36:3d:6e:10:80:28:cb:d9:d8:e6:29:1f:
75:2a:5f:bb:3f:99:cd:cc:5e:ca:2f:8b:13:0e:7e:fc:9c:1a:
33:16:03:2e:ca:44:00:6c:04:7b:8b:d4:52:75:b5:c5:f2:c1:
e5:38:19:0f:ae:af:74:f2:72:c3:c3:d6:8f:b5:c1:2f:ae:e0:
7d:3f:b7:ed:37:d3:79:78:92:43:dd:5e:7b:81:bf:92:5c:40:
fb:e7:95:91:d0:1f:bb:a7:74:06:d9:83:e3:14:40:89:46:09:
33:42:8e:64:00:5a:f1:e8:6d:ca:63:95:b5:c9:fa:96:9e:4f:
a5:02:64:69:4c:0f:0a:34:f3:b2:69:21:a8:d6:89:04:ee:57:
9a:8d:15:33:1f:2b:64:56:ae:59:ef:9b:26:86:97:2d:c3:d1:
9f:1c:32:27:89:3a:a7:ba:74:da:05:e1:ed:ad:29:82:e1:6c:
87:fc:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:42 2025 by rpki-client