
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (raw, json)
Hash identifier: FnygnhbW4icliWyS62ZBFxbhsookrKEZs1+PsTmtGQo=
Subject key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8366
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 Oct 2026 12:49:53 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 69.94.32.0/20
IP: 69.94.80.0/20
IP: 209.212.192.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33638 (0x8366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 9 12:49:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.94.32.0/20
69.94.80.0/20
209.212.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:7e:a4:57:88:b4:f9:f1:ac:82:a4:12:40:c9:4b:15:8e:ba:
47:ea:1c:9b:9c:92:16:ab:ca:27:46:da:68:3c:a4:b5:8e:62:
1c:b9:62:42:48:9d:41:e7:67:84:95:14:5c:c4:86:02:da:48:
0b:28:ec:a7:d0:e2:80:d8:5d:b8:bd:51:70:e1:a9:a5:5f:ff:
cc:23:ae:a3:ba:fd:90:bc:83:a3:75:03:a7:94:e0:f9:e9:3a:
44:fb:64:70:d7:7d:76:8c:e7:b5:5e:37:c0:b0:28:f4:8d:97:
1d:ce:59:67:2e:8a:a6:44:dc:5d:de:a1:b4:77:df:dc:59:87:
b4:8e:b6:28:e2:03:0c:6a:c0:79:cd:36:16:92:bd:26:83:1b:
69:d4:da:4e:5e:21:38:87:86:36:dc:3d:e7:f5:09:68:86:72:
a8:ec:06:ce:50:2b:6b:77:1f:6f:21:39:9b:d9:f7:dd:78:e5:
b2:93:b8:a3:f6:57:ba:e2:66:de:9e:a0:3a:0a:2a:1a:bc:65:
f9:6d:35:fa:60:34:02:61:78:5f:d5:79:b1:99:b0:71:85:c4:
a8:f7:93:6f:f4:47:1e:65:bd:78:71:eb:a3:61:c0:98:6e:75:
b5:25:2e:e4:8d:b7:d9:67:03:52:7a:97:7e:49:68:c6:8c:a1:
66:7e:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:59:30 2026 by rpki-client