Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
File: vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer (raw, json)
Hash identifier: eG2K7H3zqx2DKX/nb1BK/97ySEMr7+1oRil9+A44ZmA=
Subject key identifier: BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8094
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Aug 2026 05:42:19 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32916 (0x8094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 11 05:42:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91CD277, serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:82:dd:e6:2e:22:17:5b:2b:d4:64:02:4f:
87:ca:73:64:6b:43:83:1d:a0:38:95:81:f0:3d:c0:
06:1e:0e:30:e1:9f:d9:11:0d:40:33:17:85:56:f1:
06:85:0e:9d:2e:ca:af:4b:cb:db:61:78:a4:a0:98:
3d:66:0a:4e:8e:81:b8:55:30:41:af:91:69:50:04:
15:91:6d:e8:39:ba:8e:dd:86:56:16:d3:92:3d:3e:
74:bb:bd:bd:44:4e:b7:1f:b7:3c:a0:08:34:4a:82:
c7:6c:48:6d:14:8a:3e:a1:b7:fb:46:e2:33:ec:58:
5c:c4:f5:62:78:06:f9:d6:c8:02:73:18:10:3f:9f:
65:cc:c2:39:f1:58:db:29:39:04:2f:64:1e:8e:c3:
38:73:ae:91:b3:ac:a4:d1:fe:55:cd:df:a1:ad:c2:
5a:0f:ab:ab:26:29:a4:30:5e:cb:c8:e2:eb:58:3b:
7e:f3:bb:7b:8b:8d:72:24:63:cf:01:0b:a0:bd:76:
e7:25:70:28:c3:4b:fa:db:8d:60:84:4f:90:54:dc:
cf:cf:c8:a4:75:5a:46:6a:98:1a:0f:60:b2:4e:07:
f5:4f:9f:9a:00:3b:75:69:3c:50:0d:77:f2:93:14:
de:e4:2c:3a:f1:9b:13:23:d8:76:ea:43:da:2c:aa:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.248.0/23
Signature Algorithm: sha256WithRSAEncryption
45:6e:3d:99:08:8d:57:aa:e0:53:09:b6:0c:7c:7c:1a:d7:f8:
67:dd:5e:7b:a1:ed:50:b4:d7:1d:90:ab:5f:bb:16:55:53:6e:
03:fc:84:9b:f3:31:ee:ea:fd:aa:e3:19:3d:b3:b6:fb:27:7f:
4c:a0:10:50:26:84:2f:92:d5:89:7a:c6:4c:48:2b:7b:63:d7:
29:38:72:00:e2:b1:7e:14:d6:8b:b7:da:b3:0a:e5:26:e2:21:
26:a7:c8:c8:7a:04:c5:c9:a3:07:d0:a5:3e:43:90:bc:be:09:
20:63:1d:ac:cf:7b:f8:96:4d:36:ab:f3:73:0a:67:aa:17:aa:
2d:9f:c1:92:03:9c:55:e1:34:d2:2d:ff:9e:85:aa:7a:df:e5:
03:f6:0e:19:30:e9:df:fa:f1:7e:d0:fc:1b:01:67:86:df:ee:
40:ff:91:d0:eb:18:86:64:98:4a:7c:0d:fd:16:58:22:a9:05:
0a:20:92:ab:4c:e1:f8:30:de:8d:97:9c:fa:a2:47:c1:a8:0e:
44:e3:95:bc:75:ee:a0:ca:c3:8c:0e:fe:52:d9:50:a8:41:97:
4c:75:ac:95:88:dd:a3:8c:7a:34:68:28:6b:75:5e:d7:ea:94:
20:79:90:80:53:f4:28:4d:ae:b8:be:ed:88:56:10:f4:49:40:
a5:91:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:45 2026 by rpki-client