Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoiykPj3q4cRk4Kc02KxnELa6uw.cer
File: QoiykPj3q4cRk4Kc02KxnELa6uw.cer (raw, json)
Hash identifier: iARkazUYp7kKzB1VyVBOjghDJ0r94ZdBivvOx8z3MMI=
Subject key identifier: 42:88:B2:90:F8:F7:AB:87:11:93:82:9C:D3:62:B1:9C:42:DA:EA:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D656
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 01:44:37 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 133015
IP: 203.21.40.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185942 (0x2d656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 01:44:37 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91FF173, serialNumber=4288B290F8F7AB871193829CD362B19C42DAEAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:47:ab:f8:77:fc:10:fd:2f:c5:e1:44:92:
26:02:5c:25:4d:68:ae:17:dc:49:b4:0c:bf:e1:c1:
a9:c1:dd:71:17:fd:81:48:10:d5:56:ca:19:31:9a:
10:15:f3:82:92:2d:ff:1d:32:e9:28:90:48:17:9f:
a1:e2:19:5a:9e:54:85:37:65:fa:8b:09:2b:2c:06:
c7:48:a5:58:cb:28:3a:63:39:42:4c:0a:7e:c6:57:
8f:ac:53:ce:e8:d2:f0:9d:c1:37:28:3f:b2:ab:ee:
be:60:3a:fd:9b:64:06:c2:4c:0a:8a:0f:af:58:7a:
1d:7d:0e:98:c9:76:6f:19:dc:c8:1a:7b:d1:9d:36:
08:ed:06:ba:38:cf:64:8a:06:c0:74:af:29:d9:47:
26:62:fa:03:b5:ed:7c:b5:d1:f5:24:56:f1:42:90:
61:81:62:7f:dd:8e:fd:dc:70:6e:fd:a5:2b:13:b4:
b5:cc:70:98:be:f9:d6:a5:8e:c5:08:cc:9e:49:34:
02:94:5a:97:21:9e:6c:5e:90:71:67:ac:d4:09:17:
69:ef:0a:d7:53:78:30:b1:8b:9b:cf:b6:0e:e2:61:
56:a9:7e:e0:a8:ae:fc:b1:e7:2d:56:79:7d:a9:51:
ee:b5:24:f0:e6:06:fa:15:8b:f4:3e:ab:7e:ab:88:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:B2:90:F8:F7:AB:87:11:93:82:9C:D3:62:B1:9C:42:DA:EA:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133015
sbgp-ipAddrBlock: critical
IPv4:
203.21.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:40:3f:86:98:9e:96:b6:09:0f:31:91:2c:c6:89:aa:dd:e1:
dc:d8:c3:c8:0c:89:93:bb:da:67:e7:d5:68:ac:a6:44:f1:60:
12:96:7a:05:68:3e:b3:5e:76:6e:40:aa:9a:49:08:35:05:db:
09:41:63:38:a8:ad:e0:57:05:4e:e3:1a:35:a9:72:62:ee:84:
2b:56:4b:92:68:be:09:4d:4e:59:ed:ed:66:08:de:0c:40:44:
7e:b6:a7:c9:4b:ac:ce:9d:e6:58:7c:89:c8:4b:a3:e3:13:d6:
9c:39:df:78:fa:09:4a:8f:fe:dc:33:13:96:d2:a4:08:10:d1:
95:be:d8:24:a9:6e:77:be:4d:fa:fc:af:6a:06:49:56:e4:24:
f7:e7:f7:b0:e8:f1:c4:bf:69:86:5c:07:63:d0:63:ff:29:20:
2c:7c:c2:86:77:0a:09:86:93:b8:30:44:ec:8a:0c:d3:c7:19:
aa:99:ee:30:b3:6a:27:b4:ac:2d:b5:31:3e:dd:a6:e7:d9:23:
03:6f:d8:69:a9:c5:ab:ad:8d:47:09:3d:b6:39:ba:37:8f:74:
91:dd:8a:65:37:37:b8:76:05:c0:db:e6:75:43:d0:ff:e4:9d:
a3:ec:4d:ad:a7:52:7e:a8:cc:53:df:b0:cf:f0:62:14:12:b3:
b7:49:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:34 2026 by rpki-client