Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
File: vBeIK_xKhjChu_avBlGLkLpNFoo.cer (raw, json)
Hash identifier: pVga+tlc8AoAxsqa5B9wUtXkGEiaIe/rZdA1pFw1BOs=
Subject key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:52 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.156.225.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30138 (0x75ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:0e:10:1c:d3:93:ed:29:4f:3f:c8:a5:95:
c0:80:87:e8:3a:71:bd:b4:ca:ad:76:9d:07:2d:48:
ba:70:d8:d4:80:b1:9e:98:90:32:e4:b2:c4:35:b5:
0e:9e:4f:50:23:f0:4c:ff:7e:38:ae:7e:a5:01:1d:
c4:5d:86:c3:88:cf:ed:67:48:e6:68:6f:b2:7c:60:
63:8c:a7:81:61:4b:38:36:c2:82:f8:0a:6f:3b:dc:
da:d5:20:af:91:5c:47:79:2e:12:b8:72:ac:11:e9:
0f:5d:34:a2:97:36:7b:0c:d7:f9:27:05:d3:e2:95:
92:ad:38:e8:75:c0:b9:53:d2:b0:82:fc:21:27:10:
4e:a5:81:61:2d:d3:f7:f6:2d:42:82:e3:3e:bb:cd:
be:46:08:22:e0:68:ee:6e:da:c7:dc:f2:06:73:01:
54:2d:df:bd:76:b9:64:b7:18:88:b4:10:31:d6:60:
73:c7:da:18:3a:b6:8e:8c:a4:52:bc:3f:ec:1b:f4:
f9:b0:92:64:6b:38:cc:f8:79:20:68:c6:32:f4:31:
96:48:dc:d5:04:6a:37:57:bd:9d:be:2f:b7:6f:df:
c2:0d:4d:51:8e:e8:ca:07:0a:4e:dc:ef:5b:28:c0:
a8:80:9f:67:70:9f:0c:30:f6:0d:36:dd:25:33:2b:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.156.225.0/24
Signature Algorithm: sha256WithRSAEncryption
07:70:fe:99:f0:d0:9c:3a:96:b6:ac:bf:52:3e:16:0f:ca:a5:
2f:8e:56:be:8b:87:66:db:85:e2:55:c9:af:f5:7b:90:d7:cc:
0f:30:77:ac:2c:d8:bf:a5:72:e9:41:1b:cc:e1:89:a1:5c:d5:
97:90:1c:d6:03:ae:fe:b3:fa:58:80:0a:06:19:c6:89:76:a1:
ad:b8:04:0f:fb:36:bc:af:44:6e:f8:74:52:da:ad:76:11:8a:
38:28:aa:59:9e:d5:c5:53:45:e7:05:8e:3a:ef:b4:6c:64:60:
1f:76:97:56:6d:55:6f:19:d7:0a:6e:81:44:b5:c5:fc:b3:bb:
bf:58:d0:80:de:43:f9:82:bd:ea:8c:a1:2b:ad:2c:b2:34:f9:
c3:77:93:a3:9f:0f:3f:79:19:73:f9:40:3d:d1:cf:36:38:b2:
eb:13:5e:c1:98:82:4e:1e:e3:f0:f8:e0:f0:d5:b3:a8:72:34:
e8:86:17:33:e0:40:9a:f2:d9:3d:7a:80:96:28:22:ef:cd:ee:
a0:af:85:23:4b:a9:57:39:fe:76:8c:32:4a:45:b6:c5:e1:14:
14:31:89:ac:fd:e5:f6:f4:9f:ef:0a:04:fc:a6:b7:58:63:1e:
58:e8:e5:78:3f:bb:db:29:d8:3c:1e:09:60:75:66:5f:c3:53:
6c:a9:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:00 2026 by rpki-client