Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
File: QgHlq32GvGha8R8C3mhAUVttgFg.cer (raw, json)
Hash identifier: 37mk06nUCQgUO38+CunS3ZBugNL/UNSEVZXZPflQyvE=
Subject key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0298A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:40:26 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 38547
IP: 2404:f400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170148 (0x298a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:40:26 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:62:21:bc:3e:a5:6a:de:ba:43:0e:78:d4:
87:74:b6:69:62:da:12:d8:3c:3e:38:04:05:2a:6f:
4d:02:1d:5a:80:70:20:9c:ba:6e:bb:26:4f:8a:b2:
68:54:b3:99:40:92:6b:98:4d:ce:ea:17:fc:62:33:
6d:46:43:1a:d9:1e:9f:95:0e:74:aa:29:d3:54:84:
a6:b4:80:5c:ea:54:7b:a7:2b:0a:72:2b:65:c7:f5:
e3:43:cf:6f:6f:d8:bb:e8:76:7c:69:28:43:6b:fb:
3d:f8:38:8f:bc:6b:67:06:d1:04:db:44:4a:92:ca:
7e:d0:1e:ad:d7:02:24:33:b4:7a:28:6d:25:61:ed:
5f:57:37:bc:39:c1:0f:41:f2:11:7a:3a:91:4e:d5:
1e:62:1d:09:22:db:b3:3c:bb:76:bc:cc:c6:9e:d1:
da:ae:84:2b:55:46:6f:3b:de:a5:68:20:22:86:55:
84:6a:29:f7:74:7c:f1:5d:dd:75:0d:6b:a2:dd:5d:
f4:0b:fb:a0:68:5c:48:df:1e:ac:07:af:3a:9b:0c:
9a:6f:da:08:6d:06:86:37:00:f2:83:9e:ad:6b:98:
9d:fd:fa:51:60:20:cd:0d:87:54:de:b8:4f:e5:42:
7c:86:2b:7b:be:9c:25:da:f2:68:e6:03:7c:8a:6a:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38547
sbgp-ipAddrBlock: critical
IPv6:
2404:f400::/32
Signature Algorithm: sha256WithRSAEncryption
69:d3:9d:ae:49:2e:af:36:9c:21:40:47:ad:f3:d7:02:56:9a:
c7:42:35:89:6a:bc:dc:dc:2c:1d:ac:b5:e0:98:6f:72:0f:36:
27:1f:33:1c:e1:42:7f:70:62:88:ec:ea:82:56:9d:77:25:02:
90:8f:d0:4a:bc:ad:ea:93:cb:3d:1d:87:7e:4f:f2:45:b4:2c:
15:f2:ab:52:5f:f4:9e:55:f5:d9:7f:23:84:06:a1:5d:3f:50:
15:cc:94:85:dd:51:41:e8:7e:3e:c8:81:f6:da:58:75:79:3d:
f2:11:de:81:47:98:43:bd:ff:09:c6:d2:2d:6e:11:11:be:83:
0f:89:5d:cd:c5:d7:52:ec:05:9b:ad:0b:43:5b:9f:29:42:ad:
4a:33:73:6b:c7:3b:d0:21:2c:71:05:50:e6:5d:04:0e:06:23:
67:a8:9e:86:b4:18:d2:5f:90:c5:44:21:dd:f1:20:c5:1a:b8:
72:d3:01:b5:bb:20:7f:ed:54:e9:3d:35:74:34:7e:a3:c0:98:
40:8b:4c:fd:03:33:8d:77:fb:e1:e1:46:55:a2:cb:a3:95:5c:
d1:83:29:c2:f5:3b:da:ff:c3:6b:cb:6c:aa:8f:71:e7:c4:1a:
47:7d:4c:50:45:e8:28:41:c8:a3:d6:d5:22:6e:5b:82:ce:39:
f7:32:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:31 2026 by rpki-client