Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer (raw, json)
Hash identifier: Fc3VipHNW1cL307fn+UNOr9Qqphe1SwfIk2Sm50DnrU=
Subject key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02964E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:28:24 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 2401:dda0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169550 (0x2964e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:28:24 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:15:23:08:23:83:2b:22:92:b2:60:bf:a8:
69:24:f4:29:2b:ab:75:cf:40:6c:1f:d6:a6:b1:0e:
af:72:fa:94:2d:e2:e2:ef:bd:ba:da:93:1d:92:31:
5b:1f:12:22:df:9e:fd:a0:aa:32:cf:2d:56:5d:3e:
19:e9:f7:cc:6f:e6:20:78:e2:e9:35:8f:d9:98:39:
e5:01:9a:fb:20:2a:39:85:71:77:62:08:37:fe:97:
c8:32:a0:8c:2b:66:1c:3f:b0:cc:80:c2:32:7b:1c:
7a:d5:d5:82:0f:fb:19:9a:52:52:3c:4d:a0:68:83:
75:07:da:bf:34:62:ff:39:a2:14:02:c5:b7:56:4b:
79:33:7a:9c:51:76:40:a8:16:b4:db:af:e5:6c:e3:
57:82:81:b4:d4:45:d6:47:58:db:84:67:bb:3a:a9:
65:73:bd:ab:da:dc:53:28:ef:46:87:57:a9:13:cd:
7d:ca:22:32:d3:3e:24:f3:74:f1:a2:e2:e9:92:f0:
c9:7e:40:c0:8d:38:aa:41:06:c8:0a:0f:59:31:55:
07:94:dd:2d:bd:d5:5a:26:b6:73:77:9a:a1:15:8a:
24:eb:62:d8:2e:7d:43:9b:38:db:a7:8c:ee:23:9c:
15:41:e9:9a:bc:f5:6e:2e:0f:0e:c8:21:c2:04:da:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dda0::/32
Signature Algorithm: sha256WithRSAEncryption
d6:31:ad:43:a3:92:93:9e:de:a8:db:cd:0a:1b:34:d6:8d:ac:
fb:44:29:42:ec:0b:9c:da:4c:fa:eb:4f:39:fd:0e:62:eb:26:
99:cc:ff:4b:38:4a:54:56:c3:c2:6b:1d:8d:f9:a2:00:dd:67:
bf:a6:73:39:9f:3b:87:ea:23:ac:69:b7:89:06:a7:28:af:b1:
f1:45:02:aa:97:a7:e2:8b:02:19:3c:cf:13:e0:4a:0f:1d:3f:
73:ac:87:a8:c8:05:30:91:db:98:bc:ae:d6:c1:9d:6b:1e:ad:
df:d2:a5:6b:82:37:16:d8:55:d6:06:06:b6:ed:01:35:d6:e5:
1c:75:18:25:be:70:e8:27:6c:c5:34:04:93:61:b6:14:8a:fc:
a1:62:3c:62:70:1a:0c:57:9d:62:a1:e4:36:40:c2:47:35:79:
a2:c4:bd:a4:b2:86:cc:e2:9a:83:70:a5:46:b7:0a:f2:27:ad:
f7:5c:2e:ce:c5:81:ba:d3:48:97:55:70:1d:de:f7:a3:14:4a:
07:6f:85:12:a1:a2:8b:50:c8:17:33:97:c6:ce:2e:4c:6e:f4:
ab:5f:4c:03:b5:81:08:59:0c:97:14:9c:89:6b:ea:10:b3:e3:
44:f8:08:dc:45:4b:92:cf:41:89:33:66:d4:67:0b:4e:79:47:
67:cd:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:42 2026 by rpki-client