Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.cer (raw, json)
Hash identifier: 2U4yMDznF7J4qNTm7gXoMz5/u1KK2EfuWyO5ECrrgMc=
Subject key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:09 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.22.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30452 (0x76f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:c3:fd:e2:2e:6b:19:c6:66:9e:03:4b:7d:
25:43:a1:6a:20:b4:dd:90:f7:fa:0b:fb:4a:78:42:
22:31:44:9a:16:36:d3:56:22:94:64:86:55:f9:04:
60:a9:14:1d:67:45:77:2f:dc:1d:61:86:7e:98:cf:
ab:9d:e1:13:ee:2d:8f:69:9f:c5:15:3b:87:f6:6d:
25:46:e1:dd:ca:15:0a:ac:59:75:67:62:d8:17:d7:
af:c2:a7:7c:0d:94:47:d4:a2:d9:35:d3:34:46:55:
26:12:80:df:f2:c3:5e:25:a7:7f:a2:a3:e2:ef:9d:
17:4a:cf:74:10:72:b2:ff:6d:e6:a8:fd:f5:d0:d8:
1d:7d:82:0f:3d:db:57:93:bc:c9:6c:5f:d9:5d:4b:
3b:f3:7f:23:ca:38:22:17:53:cb:32:f9:bd:04:a1:
73:e1:5e:8f:02:ad:93:83:10:b2:3f:78:02:63:71:
9d:be:fb:62:1d:56:dd:cc:22:26:c5:1d:1d:ea:bf:
86:47:86:ec:0a:d9:b2:d2:59:d8:76:8a:07:bd:c6:
8d:12:c6:49:d7:2e:f2:70:da:36:87:41:be:0f:f8:
0e:47:c6:13:26:a7:ca:e7:62:9c:35:ac:20:64:18:
d5:7f:5c:d7:77:c1:a9:30:37:a9:65:a8:32:69:e8:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:3a:c9:f7:bf:22:c7:49:45:dc:df:c8:5e:ed:f8:5f:28:c2:
97:0c:d1:1f:c9:23:79:71:97:f9:04:32:34:b6:8b:80:7e:83:
b8:b2:6a:61:4d:2d:e3:e7:8c:7a:6e:09:e2:f1:93:49:35:b5:
57:c6:62:b2:c6:d4:be:59:c5:ec:59:f2:bd:6c:1f:c7:ad:89:
cc:0d:22:0a:4f:d2:34:6a:04:f3:1b:c5:3d:ae:fd:a2:71:8a:
ab:63:66:68:3c:7a:1b:e9:b0:14:26:54:74:1c:34:ee:32:9e:
66:1a:d1:a3:f4:32:fe:71:13:ef:26:7d:ff:22:6e:5f:93:18:
d3:59:fe:62:82:21:5a:9f:5b:1c:c7:a5:9e:49:bf:dc:40:05:
30:b7:c4:ad:51:ee:01:bc:f9:87:f0:bc:08:62:f5:2b:ca:a9:
c4:e7:b5:06:a1:0a:bc:1e:a0:27:cb:98:08:e0:c1:40:f7:3c:
10:04:58:bb:4d:e4:19:bb:d2:a5:6f:71:ca:50:8e:da:c2:88:
31:7d:b1:7f:06:c9:55:62:d6:8b:9b:78:a2:54:68:cd:79:c8:
7b:a6:fb:6c:ef:38:31:72:1a:5c:e8:6f:e5:c6:27:01:be:a6:
2a:d1:eb:f4:db:d1:89:de:c3:81:e9:04:d9:b9:be:ad:37:cc:
1a:17:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:33 2026 by rpki-client