Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer (raw, json)
Hash identifier: 0xDqSMVG+RYWywMOSj9ii6mPx29jiIvxYithZEt8tJA=
Subject key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8096
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Aug 2026 12:21:11 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.73.21.0/24
IP: 192.107.171.0 -- 192.107.172.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32918 (0x8096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 11 12:21:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:ca:5b:c2:27:9c:46:1a:6a:06:c9:12:d5:
dd:13:ea:4c:d9:32:10:3d:be:2a:aa:a5:95:c7:aa:
e8:38:d0:38:8a:e1:4b:19:4b:1b:06:d6:41:68:56:
4a:04:6a:07:03:73:08:78:4e:7b:20:0a:55:b6:f8:
6c:66:b9:4a:82:c2:d4:37:8e:a8:be:cb:33:4a:ae:
97:f8:53:1c:88:75:84:03:31:9d:11:a7:ba:42:d3:
f7:3a:a0:cc:6c:f1:c7:3a:75:ee:01:a6:b4:2e:d6:
55:6e:36:28:c7:ca:c0:df:e9:a4:6b:9a:cd:33:ae:
dc:56:cd:75:de:18:c1:b4:f1:bb:1d:b1:53:f6:9d:
45:f4:52:4e:be:1a:4e:dd:01:66:2a:a7:74:b4:1a:
92:df:fe:99:4a:44:f1:ad:76:da:31:07:ac:f4:6d:
65:37:4b:2a:2c:0a:40:14:38:cc:bd:c7:98:3d:8f:
b1:f8:56:0d:d1:4e:97:f2:10:f0:0b:86:4b:df:f9:
02:b1:11:56:d0:89:4d:2e:02:01:2d:75:e5:8f:5a:
6b:81:51:42:57:1c:11:64:04:24:49:5f:ea:b1:81:
c3:e6:43:6e:01:81:bc:6c:41:a7:79:15:e3:22:a0:
ba:bc:9d:c9:87:bc:54:d8:e5:51:c7:77:8e:43:cb:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.73.21.0/24
192.107.171.0-192.107.172.255
Signature Algorithm: sha256WithRSAEncryption
a5:55:f0:21:53:15:ff:aa:ac:85:ad:4d:0c:bd:b2:80:1f:67:
d7:d8:65:04:b1:13:a7:29:16:a0:c1:85:99:79:e0:c2:df:5a:
39:7e:c6:4c:51:f0:ed:f7:e3:0e:1c:6e:73:c0:3e:11:a6:f9:
22:bd:f1:c8:bc:a6:43:bb:8d:2f:37:36:6b:3c:c9:51:4c:6e:
2b:69:c1:8c:ec:5c:a4:40:3d:de:30:8f:03:7e:fb:2f:2b:9c:
bb:a3:76:91:68:75:67:25:50:b1:b8:ee:13:1a:16:a6:d4:9b:
ad:7d:88:80:39:72:6e:a9:43:18:19:70:88:6e:e6:29:ee:19:
90:c8:1a:18:03:ed:a5:ac:8e:1c:63:e6:5b:0c:5a:2a:b7:d6:
59:03:fe:f2:58:54:78:16:d6:96:8e:d8:26:c1:c6:3d:26:e3:
e2:76:fe:e6:02:d0:94:15:0c:00:cd:94:cc:10:12:94:50:08:
1c:43:45:be:c5:a3:5f:a8:c9:83:6e:10:05:d2:36:e4:b8:e6:
10:d0:85:8b:ea:bc:e7:ef:7b:5d:4b:c2:17:69:57:79:82:ab:
7a:73:ba:7e:fc:41:d0:f9:89:34:1a:fd:6d:17:56:85:d7:a1:
64:e2:fd:e7:d9:e0:76:93:d4:5f:fa:63:cc:fb:58:3e:10:ab:
14:ce:f9:10
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIDAICWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxMTEyMjExMVoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2
MEYwMkNFMzJGOTU4MTZEQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOT8pbwiecRhpqBskS1d0T6kzZMhA9viqqpZXHqug40DiK4UsZSxsG1kFoVkoE
agcDcwh4TnsgClW2+GxmuUqCwtQ3jqi+yzNKrpf4UxyIdYQDMZ0Rp7pC0/c6oMxs
8cc6de4BprQu1lVuNijHysDf6aRrms0zrtxWzXXeGMG08bsdsVP2nUX0Uk6+Gk7d
AWYqp3S0GpLf/plKRPGtdtoxB6z0bWU3SyosCkAUOMy9x5g9j7H4Vg3RTpfyEPAL
hkvf+QKxEVbQiU0uAgEtdeWPWmuBUUJXHBFkBCRJX+qxgcPmQ24BgbxsQad5FeMi
oLq8ncmHvFTY5VHHd45Dy/vnAgMBAAGjggMBMIIC/TAdBgNVHQ4EFgQUVft7zKdA
KF/IGqNg8CzjL5WBbbYwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTEyN0MxL0RDRjk4QTE2Nzc4MTExRUQ5NkIzNjQ2NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExMjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektk
QUtGX0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8EHjAc
MBoEAgABMBQDBADASRUwDAMEAMBrqwMEAMBrrDANBgkqhkiG9w0BAQsFAAOCAQEA
pVXwIVMV/6qsha1NDL2ygB9n19hlBLETpykWoMGFmXngwt9aOX7GTFHw7ffjDhxu
c8A+Eab5Ir3xyLymQ7uNLzc2azzJUUxuK2nBjOxcpEA93jCPA377Lyucu6N2kWh1
ZyVQsbjuExoWptSbrX2IgDlybqlDGBlwiG7mKe4ZkMgaGAPtpayOHGPmWwxaKrfW
WQP+8lhUeBbWlo7YJsHGPSbj4nb+5gLQlBUMAM2UzBASlFAIHENFvsWjX6jJg24Q
BdI25LjmENCFi+q85+97XUvCF2lXeYKrenO6fvxB0PmJNBr9bRdWhdehZOL959ng
dpPUX/pjzPtYPhCrFM75EA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 21:23:51 2026 by rpki-client