Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
File: QRX9yGsnZiNgOztkXUcIQLgDm8g.cer (raw, json)
Hash identifier: WbD8lVrzVYFpYOvzojRf32WXOZ+WGlZMQCaYYHVLLq4=
Subject key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D30E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:17:20 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154160
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185102 (0x2d30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 13:17:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:27:b1:5e:a8:98:28:9a:39:9d:fa:f9:bc:
4e:76:24:c4:06:d3:7b:ac:fd:4e:02:5c:c5:08:3c:
a5:d2:4c:9f:ef:18:7c:71:c1:1c:c8:0f:3a:8d:31:
06:76:09:ae:f6:f2:ce:2a:4c:42:63:2c:e5:f6:5b:
c8:d1:e2:06:ce:fc:f7:c4:4b:23:e6:00:0d:70:3d:
68:fe:2e:b7:3f:e5:1e:10:ab:6f:cd:77:1e:10:27:
9a:d0:63:4e:e6:b3:d8:c9:33:8d:46:26:d9:3e:bb:
8d:ab:db:09:6f:20:47:4d:27:7d:ce:05:de:cd:b3:
14:29:d0:38:bd:d2:90:9d:1a:e1:a0:cf:df:6b:56:
61:45:ea:e2:6f:19:70:cf:ee:29:4a:6d:e2:7f:71:
47:5f:2a:80:f6:a0:33:42:0b:88:63:55:e4:78:37:
fb:07:d2:8b:51:4c:22:85:23:7a:45:66:db:43:71:
9d:d8:33:b8:40:68:6b:3d:ea:d3:58:0b:99:84:25:
ef:7b:f7:44:80:07:de:63:b8:64:43:cd:86:a8:f0:
8b:08:69:b4:d3:75:3a:7d:48:a8:08:98:66:9d:c5:
47:7a:ad:ba:17:58:43:f6:58:cf:11:06:90:e6:ba:
fb:07:ec:8f:d6:d2:ca:f3:6f:d7:a9:1a:68:7e:8c:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154160
Signature Algorithm: sha256WithRSAEncryption
5f:b2:c7:24:e8:da:99:da:ac:ad:d0:e7:c8:76:82:b1:8f:8b:
8b:59:ea:8d:ed:fe:08:74:13:eb:0b:d2:94:56:0f:44:f1:f0:
35:34:4a:4b:95:d1:8a:e1:d7:07:44:2c:6e:a3:64:28:8d:a4:
1c:8c:9c:c0:a3:6e:c8:6c:a0:55:40:7b:c2:3f:f7:77:05:69:
f8:02:96:87:6a:39:c4:b5:57:61:a8:b0:52:8d:66:f9:03:fa:
d3:d4:da:ba:67:f3:05:b8:db:6b:da:62:40:30:10:11:31:a6:
25:87:11:62:a5:29:c7:19:d2:be:16:42:a4:be:7e:96:d8:be:
31:bf:2f:90:24:28:49:1d:ff:2e:4a:91:1e:68:29:72:e4:b7:
85:3c:3d:33:25:54:d2:26:4a:ab:0b:81:ce:6d:95:8f:3c:bf:
9a:16:e1:a8:c5:a3:ab:f6:b8:ba:29:95:b1:f1:b1:54:24:d1:
f1:86:2a:16:ea:64:1b:46:8b:d5:e9:ee:1a:81:a7:1e:fd:19:
18:e4:71:6c:e1:c0:07:b3:51:50:6a:74:f6:de:0a:f6:4f:bc:
d9:36:6e:42:bd:80:ec:94:ed:4d:3c:01:ba:e7:cf:f3:86:9b:
8e:eb:68:df:a5:80:f5:94:ae:f5:a1:18:ac:cc:06:2a:c4:d7:
36:3c:34:c2
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAtMOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkwMjEzMTcyMFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkU5RTMxMTAvBgNVBAUTKDQxMTVGREM4NkIyNzY2MjM2MDNCM0I2
NDVENDcwODQwQjgwMzlCQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRhyexXqiYKJo5nfr5vE52JMQG03us/U4CXMUIPKXSTJ/vGHxxwRzIDzqNMQZ2
Ca728s4qTEJjLOX2W8jR4gbO/PfESyPmAA1wPWj+Lrc/5R4Qq2/Ndx4QJ5rQY07m
s9jJM41GJtk+u42r2wlvIEdNJ33OBd7NsxQp0Di90pCdGuGgz99rVmFF6uJvGXDP
7ilKbeJ/cUdfKoD2oDNCC4hjVeR4N/sH0otRTCKFI3pFZttDcZ3YM7hAaGs96tNY
C5mEJe9790SAB95juGRDzYao8IsIabTTdTp9SKgImGadxUd6rboXWEP2WM8RBpDm
uvsH7I/W0srzb9epGmh+jKRxAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUQRX9yGsn
ZiNgOztkXUcIQLgDm8gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFOUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RTlFMy80RTBFMzcxNEEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdz
blppTmdPenRrWFVjSVFMZ0RtOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlowMA0GCSqGSIb3DQEBCwUAA4IBAQBfssck6NqZ2qyt0OfIdoKxj4uL
WeqN7f4IdBPrC9KUVg9E8fA1NEpLldGK4dcHRCxuo2QojaQcjJzAo27IbKBVQHvC
P/d3BWn4ApaHajnEtVdhqLBSjWb5A/rT1Nq6Z/MFuNtr2mJAMBARMaYlhxFipSnH
GdK+FkKkvn6W2L4xvy+QJChJHf8uSpEeaCly5LeFPD0zJVTSJkqrC4HObZWPPL+a
FuGoxaOr9ri6KZWx8bFUJNHxhioW6mQbRovV6e4agace/RkY5HFs4cAHs1FQanT2
3gr2T7zZNm5CvYDslO1NPAG658/zhpuO62jfpYD1lK71oRiszAYqxNc2PDTC
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:01:14 2026 by rpki-client