Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
File: VuOUrxtay4_0gsjGAmn-oOTEJ74.cer (raw, json)
Hash identifier: YKJJN1DrJF9Jy8R05KSh/Jyekqd36HDTPWVzFUXT3PQ=
Subject key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 74AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:47:01 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29868 (0x74ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:47:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:3f:0c:39:35:6a:4f:f2:20:20:49:49:6f:
0d:fd:e4:d2:3d:a6:56:0e:76:93:5b:be:80:a9:0b:
63:86:3c:1a:1b:83:bb:69:10:76:1c:44:26:b4:d2:
4c:f9:17:af:9a:2c:1d:74:0c:fd:bd:87:30:52:9b:
3f:cf:9d:e6:75:18:12:7b:53:97:4c:3d:85:1a:b9:
7f:90:22:d7:d2:da:fe:4e:ec:d3:4f:57:8a:c7:5c:
34:8c:e2:a1:fd:35:11:7b:28:d0:d5:8d:6d:e1:b6:
15:f5:90:e1:af:26:9e:0e:60:ff:70:8a:a5:c0:40:
41:60:7f:c5:1b:61:31:d4:d7:e3:82:69:f7:f3:34:
cc:43:9a:8a:08:ba:55:0b:ee:99:10:9a:47:fc:61:
c2:85:2e:f6:48:f1:62:05:76:8c:53:20:38:62:0a:
51:f9:4a:a2:66:26:dc:db:ef:bd:fc:65:ea:e9:c5:
3a:a3:7c:4f:3f:7f:42:c5:64:29:c7:27:fa:40:17:
eb:c7:ec:f8:29:90:db:63:85:d0:f3:40:6e:7b:8b:
59:dd:af:58:25:7e:7a:34:aa:95:37:5c:fe:a3:66:
a6:5c:7e:a1:38:b3:21:69:f4:89:a2:33:42:70:a4:
de:53:64:e2:3a:2f:79:9e:9e:f2:25:8e:21:3d:a7:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:92:48:80:3b:2f:87:ce:a7:fa:ca:3e:b6:43:f6:e2:90:66:
ef:ef:ec:65:0d:75:a3:49:d0:f8:cb:24:1a:01:56:88:ab:01:
80:c1:d9:f0:0d:17:12:7b:1d:a8:00:36:66:5c:12:76:a2:54:
cf:80:b0:fd:e1:1d:ef:95:5c:2a:57:d9:0e:a7:66:ae:b2:4d:
30:e6:0a:73:ad:67:eb:84:8c:f5:d8:5f:5e:7c:45:01:7f:ea:
32:4e:31:b8:ff:3f:2c:ec:0b:1a:8f:13:b5:90:e3:2a:2c:81:
5f:5a:87:c9:28:16:69:01:7a:8d:cc:71:d3:e2:55:e8:f2:02:
12:79:03:d7:0c:53:08:c1:a9:f7:19:ed:56:05:1b:15:31:80:
79:96:36:99:02:c3:e2:f7:11:fb:09:64:54:1b:8d:83:16:61:
04:9b:34:07:22:71:92:8d:98:be:ca:49:86:92:65:bc:88:85:
fe:33:27:f7:e7:33:3c:5f:3a:da:df:f4:8b:74:4e:98:f9:7c:
27:75:33:a3:9c:7d:32:55:48:3e:40:d5:35:86:07:17:3e:97:
e6:b0:30:1a:34:ae:74:ec:79:3a:84:30:d3:e5:f3:6e:b2:03:
7f:e7:96:15:01:39:99:bb:c7:00:fb:dc:88:5f:fc:61:fe:15:
33:57:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:44 2026 by rpki-client