Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
File: vmV8x_anGoEMa1JeGkxyucvU1u0.cer (raw, json)
Hash identifier: Un3aXCsz0J+1GxqbcbS2E5GSzdv6xR3DvEeNYHu7Dbo=
Subject key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 513F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20799 (0x513f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:83:5d:55:33:23:e2:7b:ab:2f:47:b3:a9:
7a:fd:70:4c:83:19:52:42:21:0b:7c:aa:d0:3c:9d:
0f:e5:15:7b:6e:1e:e0:73:5f:03:c9:6e:c1:8f:c8:
ff:a6:f0:0e:42:27:5a:44:b0:8c:bb:9f:17:f3:1c:
c3:a7:41:c4:de:10:8a:b7:ec:d5:0d:f4:f3:95:0d:
01:d4:a4:d0:81:3b:4c:b8:a7:42:4e:7d:a6:57:f9:
6e:80:64:73:1a:03:1c:dd:fc:e0:13:48:9c:58:2e:
8f:5d:b4:56:2e:ce:65:36:ea:be:6b:03:72:71:8a:
cf:0a:3c:6b:23:69:39:0e:04:67:d9:45:a8:fb:f1:
59:5f:5b:54:ce:da:db:f0:4d:fa:2a:65:45:5d:b8:
c0:96:ea:12:2d:45:cf:80:dd:23:e7:65:43:43:73:
bb:9a:1a:a8:a5:0b:c1:27:b2:05:64:cb:68:33:4c:
c5:9c:60:be:b5:50:78:92:59:47:8e:c4:d1:3c:11:
b6:7d:76:81:c7:3e:7e:07:e5:75:8f:27:7e:6c:00:
ec:64:75:55:24:1e:33:d7:16:f4:4e:a9:e6:6c:4a:
16:88:c0:a2:d8:e4:88:8f:3c:2c:75:00:c1:2a:88:
2f:df:5e:f8:42:1f:f5:79:e6:b1:c5:0a:3e:d0:ca:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:93:63:08:3e:66:09:f7:64:3a:13:0a:be:7a:0f:d7:57:89:
ba:d2:5f:bf:47:aa:49:7b:1e:d0:5c:bf:b9:44:8b:fb:45:f0:
b8:0b:9b:3b:87:3b:29:fd:5f:6a:d3:77:bd:88:e5:32:cd:f1:
69:bd:2e:d4:c8:90:5f:7a:46:93:7f:79:0e:90:11:8d:5c:c4:
a1:3d:ea:20:e7:1e:51:56:a3:08:e9:e6:fd:9f:b4:3f:c6:63:
da:f4:28:18:87:2f:42:b1:36:c3:64:02:51:40:05:62:19:b5:
d0:bb:44:01:93:7c:d7:a5:db:61:ea:e6:89:d0:62:4e:af:04:
9c:30:ce:cc:18:0a:7e:6c:2b:97:b4:95:78:4e:8d:77:0a:9a:
51:7f:25:02:d0:11:d4:0c:99:b2:77:9d:99:a9:15:c4:08:af:
20:53:bb:f6:b9:c7:4d:ff:c2:ec:cd:6c:90:52:6e:2b:36:fa:
5f:50:69:7f:f7:e7:71:b0:4e:46:5c:67:cf:f3:0a:cd:b1:03:
00:82:1d:02:d5:20:a3:ad:3d:ba:87:0b:96:70:4e:d7:ed:ce:
df:fd:8a:51:a1:1d:5c:66:a0:ef:1a:52:ae:7b:8e:b5:23:ce:
22:8d:28:bf:7e:3b:82:b8:0e:ce:75:12:2c:70:61:2f:6f:d6:
48:75:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:56 2026 by rpki-client