Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
File: QcEdgay69pPnrWH6EU53uf1PV8M.cer (raw, json)
Hash identifier: TWTAjBa5cfLi2yS0P+K3MIv6tXRjNCdC+ZkjwSeqBOQ=
Subject key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0295E9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:26:35 +0000
Certificate not after: Tue 02 Jun 2026 00:00:00 +0000
Subordinate resources: IP: 103.147.232.0/23
IP: 2001:df2:aa80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169449 (0x295e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:26:35 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8d:a0:4f:1f:bd:4b:66:f6:2e:80:72:92:
42:19:48:09:2e:6d:24:57:c5:63:6c:ca:c2:a5:8d:
e9:d5:56:a7:20:56:b7:50:2f:61:82:44:5a:2f:fc:
47:d9:61:c8:50:ae:d3:43:15:41:78:06:56:c4:0d:
43:fa:22:e3:89:1c:19:19:39:ca:94:71:e5:cd:c6:
80:7d:5d:7e:44:1f:79:ae:53:3a:a2:11:f8:fc:19:
5b:cf:ea:41:48:42:d0:0d:b3:0f:98:b9:20:71:b5:
43:c7:d5:d9:ef:4e:f0:af:dc:e3:3f:8f:bc:8f:1c:
93:bb:78:fe:f2:dd:10:38:63:2b:07:82:cf:b8:a0:
cc:cc:de:f1:64:4f:54:63:d0:2d:6e:05:60:a7:6d:
47:36:0e:77:ac:60:49:61:f9:7d:32:ec:a5:d5:2e:
02:8c:83:07:00:72:eb:6a:62:16:8d:06:cc:da:86:
b7:50:22:81:f0:b8:9e:d3:6b:65:15:04:47:30:18:
d1:7b:98:7a:50:4b:16:c4:f0:30:8f:fd:6a:dc:66:
19:e0:3f:9d:f8:13:aa:32:d4:ca:fd:d2:e1:6a:cb:
0e:51:b4:f0:8e:de:5b:d0:99:21:fa:aa:55:23:6d:
bb:ab:7f:d0:71:71:13:83:5a:54:da:85:a0:63:fd:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.232.0/23
IPv6:
2001:df2:aa80::/48
Signature Algorithm: sha256WithRSAEncryption
92:e1:ad:d0:71:30:0c:4d:15:6a:95:48:8a:e8:5b:58:f6:d2:
30:89:4e:f2:8e:4d:30:b5:5c:b0:30:66:ad:2f:87:74:d5:b4:
17:1b:c0:7e:6c:a2:4b:e8:05:84:30:81:e4:08:e7:8a:5f:e5:
0f:7c:28:52:69:f0:30:31:a3:45:a8:9d:d1:4f:eb:3d:7f:50:
ec:8e:49:fe:be:46:c6:84:d3:62:18:3a:7f:c4:bc:b8:76:55:
8a:55:59:07:dd:3f:54:aa:38:13:7a:e0:b6:1b:3d:54:43:10:
f0:43:f6:53:69:a2:d5:fc:1c:c9:7b:1b:da:05:8e:d3:a7:07:
67:c6:29:82:74:8d:49:2d:29:4f:dc:7e:b8:94:8a:b5:9d:90:
5c:34:1d:7d:0f:5e:66:73:35:c5:db:42:d4:08:6c:f8:04:fd:
7c:79:67:9c:c1:5d:63:8d:08:e7:0c:1f:99:c5:cc:db:78:d8:
0d:39:c1:6b:3f:f1:2d:5a:fc:62:27:17:ff:6a:51:e1:42:61:
e5:7f:43:ed:f3:85:74:b3:02:c4:a4:92:de:25:ed:da:be:a8:
4e:8a:1b:79:54:81:2c:3f:64:a4:90:de:ab:ed:18:d3:55:60:
35:3d:ca:ce:a8:dd:4b:34:56:76:b0:c9:ff:40:55:70:a5:72:
8c:15:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:33 2026 by rpki-client