Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
File: vAv4-dc7foz8yOpen0LXqFUjPXw.cer (raw, json)
Hash identifier: IiKZrpfoBhgjxFyC/6K3rJlumw8644CiI3rKmx+mrk4=
Subject key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 812C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 13:03:41 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.62.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33068 (0x812c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 24 13:03:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:54:22:a2:9f:01:a2:98:20:e7:77:5f:da:
f9:a1:8f:ad:11:23:8e:5a:4d:5e:00:a3:d4:0a:0f:
9c:c7:19:c5:07:3b:2a:64:a8:14:ed:73:10:41:fa:
fb:87:65:54:4a:99:92:06:2f:7e:9c:8f:ec:25:16:
23:aa:63:99:08:c4:e2:48:b7:d4:42:d3:15:58:ce:
b8:16:a4:7a:48:63:c1:ce:4e:76:d8:e2:d0:38:71:
2c:41:23:f4:e3:b9:61:ae:f9:0f:35:02:c0:f0:7d:
d6:1c:0e:94:f3:ae:32:a7:fd:74:ec:d4:4e:65:06:
be:25:72:bc:17:16:9c:18:79:9a:cc:0c:2a:75:61:
15:1a:73:68:f8:6a:8a:c9:86:09:74:ff:8f:1e:0e:
9d:24:15:c8:8e:fe:76:75:9e:e6:0d:1a:ff:03:19:
d4:85:c2:77:6c:e4:ba:15:f6:e0:52:2d:fc:82:46:
59:28:57:51:2e:2c:6b:d8:a5:1f:db:29:bd:be:28:
25:ab:76:7f:64:9e:21:4e:5a:d1:cf:e7:eb:5d:b2:
ab:72:e2:6a:2c:86:01:b7:3c:78:a0:1c:2b:b4:45:
ab:5f:d3:16:a5:df:d6:0f:aa:59:f9:68:09:39:17:
fd:46:7f:c7:6f:69:7b:fe:4c:7c:15:1b:ac:15:d0:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ac:26:b6:76:ac:47:ed:26:80:f1:fe:78:86:03:d8:e5:6a:
37:f5:a9:9a:53:c4:46:c9:67:54:8b:01:2f:4e:8c:d9:85:6e:
1c:fa:aa:5a:8a:47:07:21:57:5c:0a:8c:01:fa:ea:83:c6:ef:
61:b9:7a:fb:f5:0c:0b:11:3e:61:ee:20:e1:ba:b8:d6:fa:db:
3a:0d:e3:0c:3d:33:90:13:d7:ae:a5:7d:4a:58:57:3a:d7:ba:
b6:ce:8a:1a:12:c6:01:68:7a:fd:15:02:27:64:b9:d9:21:fa:
22:24:db:46:65:3d:78:79:ce:ff:53:4e:5e:15:b7:4a:f4:fc:
ac:9d:94:41:e1:70:24:11:55:3c:77:18:e8:9e:ac:52:5d:89:
9b:79:0d:99:ca:a0:80:3b:f8:1c:2a:eb:6d:42:13:8e:e7:c8:
3d:55:1f:f3:90:3b:6d:69:77:78:ca:a9:51:f2:c1:ca:5d:b9:
b4:01:b4:38:ed:b5:99:24:28:6f:cf:db:50:55:b0:ec:0d:42:
62:94:7e:9d:dd:9d:91:ed:21:b6:d6:14:4f:57:6f:9a:e1:aa:
8f:1e:fa:06:45:c9:ef:df:96:29:83:0e:e9:38:67:63:b3:a4:
73:bf:89:c8:b1:75:9c:56:d0:8b:9e:8e:94:aa:46:8d:ff:63:
a5:ec:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:41:12 2026 by rpki-client