Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer (raw, json)
Hash identifier: Wkdf+PwWFadQMjQlXB5qyun/m2j+QDneuvXzT8NJJb0=
Subject key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 802C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Aug 2026 14:47:50 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 155.71.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32812 (0x802c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 4 14:47:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:e1:ba:48:81:67:61:dd:7f:05:c5:b8:e9:
21:9f:43:5b:2d:ec:3a:b1:bc:74:61:7f:e5:43:09:
be:cd:bd:11:72:3b:88:99:3f:f7:2a:79:0d:f3:a6:
f1:5a:6a:d9:62:3b:6e:3f:a0:0a:77:af:ae:b5:56:
5f:c3:49:ce:f7:4b:45:d9:95:f2:00:29:33:91:69:
83:8d:c6:11:85:1e:c7:1d:36:31:27:3f:cb:4f:87:
c7:e7:27:6b:e6:f4:22:b2:02:1c:9d:b8:d3:0a:6b:
7e:7f:52:87:60:6a:9d:79:4e:41:32:63:66:7e:be:
21:e7:81:80:2c:37:13:ff:9e:75:fb:13:c5:a3:77:
9e:0a:5d:be:a7:9c:aa:01:4c:c1:9b:e1:49:a4:07:
75:61:dc:0e:62:bc:c5:ed:a5:17:29:b8:54:5f:fc:
15:e6:b9:5a:5c:2c:11:8b:2b:53:4f:fa:f3:e9:a0:
e5:a1:a4:70:ad:0d:56:74:8c:6d:9e:de:bf:af:72:
91:70:cb:74:1e:14:31:00:ec:4f:f7:32:d7:59:60:
38:58:f3:38:70:2c:97:df:ba:75:6e:d1:6d:30:85:
69:b8:26:b5:28:4f:a7:08:15:51:e2:57:b6:9f:33:
b6:ec:57:4f:69:98:b5:90:ab:9c:28:91:75:22:f8:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:85:89:50:85:12:3a:10:e6:a5:92:00:4e:15:ea:d6:64:8d:
82:2e:f2:b7:3e:fe:5b:ef:80:3c:b4:c8:65:ff:b2:6f:51:8c:
78:e9:49:23:6b:cf:83:2a:3d:cd:fa:fb:09:29:0e:01:d5:65:
60:c4:d0:85:96:f1:dd:7c:e1:12:27:bf:f6:6f:28:73:ed:df:
48:ad:ea:6b:0d:a7:00:07:15:a1:15:76:5e:65:86:af:22:4c:
9a:6d:f9:b0:84:ac:a6:05:ee:34:ce:bf:76:69:94:f2:38:3a:
82:fb:cf:99:1a:9c:95:ad:7a:33:d9:4a:65:e0:a4:29:8c:ad:
7f:7c:1c:f1:f1:d5:17:85:3d:a3:1e:a4:10:4c:f5:fa:19:ec:
b2:43:4c:2d:1b:89:c7:d3:07:e8:ea:8c:9d:8d:54:f1:b3:77:
c7:85:0b:c2:50:89:55:51:31:e6:8e:f0:79:74:ac:a7:6b:ad:
d1:07:46:20:25:c2:cd:7d:b3:eb:18:37:4c:2d:84:05:ae:d7:
c4:08:98:53:90:a7:01:c9:eb:c1:fb:27:f9:af:18:89:8d:1a:
ac:75:4c:59:d7:d1:f8:2e:d2:4d:b6:1e:9d:6e:e5:97:89:ab:
74:49:76:3f:8c:97:34:b1:a2:f8:19:f4:23:6a:f3:1a:27:8c:
ba:c9:a2:0d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIDAIAsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgwNDE0NDc1MFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkIyNDYxMTAvBgNVBAUTKDU2N0UzMjFEQUY0QUY3NDQzQjBENzlF
MzJBQzAzMDc5NzUyN0YxRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVfOG6SIFnYd1/BcW46SGfQ1st7DqxvHRhf+VDCb7NvRFyO4iZP/cqeQ3zpvFa
atliO24/oAp3r661Vl/DSc73S0XZlfIAKTORaYONxhGFHscdNjEnP8tPh8fnJ2vm
9CKyAhyduNMKa35/Uodgap15TkEyY2Z+viHngYAsNxP/nnX7E8Wjd54KXb6nnKoB
TMGb4UmkB3Vh3A5ivMXtpRcpuFRf/BXmuVpcLBGLK1NP+vPpoOWhpHCtDVZ0jG2e
3r+vcpFwy3QeFDEA7E/3MtdZYDhY8zhwLJffunVu0W0whWm4JrUoT6cIFVHiV7af
M7bsV09pmLWQq5wokXUi+HCjAgMBAAGjggLyMIIC7jAdBgNVHQ4EFgQUVn4yHa9K
90Q7DXnjKsAweXUn8dkwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCMjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjI0Ni9GMUM1Qzk1MjNDMEQxMUYwOTZDQ0RCNUZDNEY5QUUwMi9WbjR5SGE5
SzkwUTdEWG5qS3NBd2VYVW44ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwCbRzANBgkqhkiG9w0BAQsFAAOCAQEAOYWJUIUSOhDmpZIAThXq
1mSNgi7ytz7+W++APLTIZf+yb1GMeOlJI2vPgyo9zfr7CSkOAdVlYMTQhZbx3Xzh
Eie/9m8oc+3fSK3qaw2nAAcVoRV2XmWGryJMmm35sISspgXuNM6/dmmU8jg6gvvP
mRqcla16M9lKZeCkKYytf3wc8fHVF4U9ox6kEEz1+hnsskNMLRuJx9MH6OqMnY1U
8bN3x4ULwlCJVVEx5o7weXSsp2ut0QdGICXCzX2z6xg3TC2EBa7XxAiYU5CnAcnr
wfsn+a8YiY0arHVMWdfR+C7STbYenW7ll4mrdEl2P4yXNLGi+Bn0I2rzGieMusmi
DQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:54 2026 by rpki-client