Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
File: QigLfQWNU6QB9CcaqtaBFrlgi1w.cer (raw, json)
Hash identifier: pKE22KYH4D33rkDs6gHZ73qjw0yoxxOmcc5bxPpbD1o=
Subject key identifier: 42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E4D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Nov 2026 10:11:27 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154741
IP: 203.31.58.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189648 (0x2e4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 10:11:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91332FE, serialNumber=42280B7D058D53A401F4271AAAD68116B9608B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:f6:44:9c:ab:31:d5:45:29:50:2d:bd:16:
97:2b:d4:7e:58:ee:00:41:ad:17:14:e9:4b:cd:c6:
3c:94:61:05:90:17:24:57:3a:c4:a5:95:f5:a2:ed:
29:25:dc:83:3a:fa:eb:76:67:00:33:a0:43:40:5b:
60:92:8c:89:44:47:bc:d4:f0:db:36:f4:78:e3:5a:
84:93:9a:a4:80:ad:8c:39:ec:c9:c7:12:18:ed:86:
55:83:83:82:0e:ec:be:53:32:5b:73:4d:3d:a5:86:
ef:d2:fd:9d:c5:4e:75:18:ee:ab:8f:17:72:27:b1:
ec:aa:07:14:f7:f4:7c:32:0d:05:69:9f:80:a9:93:
63:ce:c0:c2:21:7a:31:50:2e:6c:6c:7e:61:b4:3c:
74:63:f2:0d:c3:1d:a1:7d:cc:c8:b5:24:df:5b:04:
7f:55:09:77:d5:c2:dc:e0:7d:25:4a:be:13:c7:2e:
4a:6d:be:06:5f:fd:0b:40:43:35:70:77:c4:74:31:
cb:3a:fe:34:fc:b7:c6:3b:60:09:ce:c9:b6:b5:3e:
de:37:a8:58:75:90:35:a3:88:62:59:6c:66:14:c0:
59:40:da:d4:19:c7:18:8b:94:77:51:1b:da:20:9a:
a2:79:17:03:9e:22:7f:57:f4:a6:76:41:1d:40:53:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154741
sbgp-ipAddrBlock: critical
IPv4:
203.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:06:f6:9a:e2:9d:f7:ed:86:02:40:2f:48:0d:2d:d6:ed:68:
41:a6:01:b5:d6:80:66:c0:86:be:d1:a0:04:91:6d:74:96:f4:
60:59:a9:b0:f8:11:56:c0:5a:b7:44:1f:0d:61:2a:86:c9:44:
8a:b8:60:f4:1c:de:86:f7:4b:ce:e3:4c:70:f4:b7:2a:fb:22:
57:9c:c9:24:1f:a0:81:e8:4a:81:fe:04:5e:32:46:f1:1a:6b:
a7:83:95:49:6e:27:00:1c:5c:2e:7f:64:dd:c4:9e:0c:5a:38:
4e:ec:52:1d:e7:4e:e3:25:0f:ca:1a:4a:42:03:39:2c:3c:67:
68:f2:fa:dd:1f:c6:14:b5:cc:7c:6a:e5:70:f2:a0:1c:92:6f:
05:59:b3:59:fe:4b:74:4c:38:72:cd:f9:ac:54:76:e0:15:c9:
b4:db:12:26:90:2d:86:b8:2c:e0:72:f3:49:ae:0a:07:29:da:
25:89:fe:da:15:89:be:3f:cd:b2:f2:c5:4b:b6:27:9f:8e:66:
18:7f:d1:fa:6b:73:fd:34:1d:5b:06:c0:c9:fd:15:39:2d:c1:
01:f8:e5:95:50:86:6a:6e:4f:98:29:c3:4b:c1:b1:f8:6c:80:
b7:8d:55:1c:92:26:9e:db:b1:35:3a:f3:fc:55:81:56:30:8d:
ab:fc:bd:79
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAuTQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTEwNDEwMTEyN1oXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzMyRkUxMTAvBgNVBAUTKDQyMjgwQjdEMDU4RDUzQTQwMUY0Mjcx
QUFBRDY4MTE2Qjk2MDhCNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJuPZEnKsx1UUpUC29Fpcr1H5Y7gBBrRcU6UvNxjyUYQWQFyRXOsSllfWi7Skl
3IM6+ut2ZwAzoENAW2CSjIlER7zU8Ns29HjjWoSTmqSArYw57MnHEhjthlWDg4IO
7L5TMltzTT2lhu/S/Z3FTnUY7quPF3InseyqBxT39HwyDQVpn4Cpk2POwMIhejFQ
LmxsfmG0PHRj8g3DHaF9zMi1JN9bBH9VCXfVwtzgfSVKvhPHLkptvgZf/QtAQzVw
d8R0Mcs6/jT8t8Y7YAnOyba1Pt43qFh1kDWjiGJZbGYUwFlA2tQZxxiLlHdRG9og
mqJ5FwOeIn9X9KZ2QR1AU5TLAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUQigLfQWN
U6QB9CcaqtaBFrlgi1wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMzMkZFLzE2OTkxODE2RDgzODExRjE4NEZEMEY3NDMyNjZDRUY5LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMzJGRS8xNjk5MTgxNkQ4MzgxMUYxODRGRDBGNzQzMjY2Q0VGOS9RaWdMZlFX
TlU2UUI5Q2NhcXRhQkZybGdpMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlx1MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyx86MA0GCSqG
SIb3DQEBCwUAA4IBAQB+Bvaa4p337YYCQC9IDS3W7WhBpgG11oBmwIa+0aAEkW10
lvRgWamw+BFWwFq3RB8NYSqGyUSKuGD0HN6G90vO40xw9Lcq+yJXnMkkH6CB6EqB
/gReMkbxGmung5VJbicAHFwuf2TdxJ4MWjhO7FId507jJQ/KGkpCAzksPGdo8vrd
H8YUtcx8auVw8qAckm8FWbNZ/kt0TDhyzfmsVHbgFcm02xImkC2GuCzgcvNJrgoH
Kdolif7aFYm+P82y8sVLtiefjmYYf9H6a3P9NB1bBsDJ/RU5LcEB+OWVUIZqbk+Y
KcNLwbH4bIC3jVUckiae27E1OvP8VYFWMI2r/L15
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:09:07 2026 by rpki-client