Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
File: vCXNTkiu32CLScwphHLFwG6L9vs.cer (raw, json)
Hash identifier: FJzvaI2ca44vm2rY0LLVEwbpjgQUwIcdRws5JyQzUiI=
Subject key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7583
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:42 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.168.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30083 (0x7583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:ee:1e:89:ed:74:2d:42:1e:aa:bf:a1:59:
11:3a:c0:e5:7e:24:78:01:8e:5e:7a:a9:78:da:16:
b8:d2:b2:ec:c1:ae:bd:62:7d:e7:71:3c:dc:53:3b:
a9:fb:4b:d3:84:6a:1e:62:d1:47:bb:15:32:a8:b8:
ff:4c:e6:ca:3e:1c:2f:30:3b:df:a2:01:14:ec:3a:
fe:fe:f6:a3:b1:03:51:6f:5a:81:15:e9:09:0a:f6:
96:2d:ad:2a:18:26:63:77:19:c1:84:ba:ea:6f:6d:
0a:e9:54:f3:17:4c:88:cd:d1:cf:d1:24:e9:65:30:
88:f7:98:00:1c:5d:d1:99:da:be:a6:fa:92:12:7c:
8d:6d:2e:b2:bf:30:e6:67:0b:2a:76:c8:a4:1e:bb:
70:e2:08:06:d8:4d:63:88:ec:48:93:c7:41:52:6b:
74:3e:f4:38:7f:47:89:28:5d:21:01:54:ee:c2:d2:
b8:ea:34:70:25:ea:55:c9:d0:67:2c:ee:cb:d4:8d:
4f:84:b2:6c:71:95:b7:f6:68:f0:c2:4d:96:dd:c6:
a4:0d:9c:ad:30:ba:5f:0a:83:1b:de:e8:00:ff:45:
47:4d:25:9a:3c:1c:ca:33:98:69:b1:7f:f1:8e:7e:
20:ef:d0:09:28:3e:fa:e8:fd:be:31:db:da:41:d6:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.168.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ab:79:66:93:42:35:b9:29:2e:26:ea:45:9f:ee:2e:e9:30:
83:72:60:ae:68:2c:2d:e7:b7:cb:87:30:0f:53:01:34:82:25:
42:e0:d6:f0:89:c2:1b:91:a7:f0:1b:06:b9:7a:f6:ff:b8:dc:
9e:bd:bd:bf:ae:f5:5e:e9:e6:0a:fc:a3:b4:9b:a5:21:c6:fc:
80:10:5a:0d:4c:d5:bc:d9:e4:a4:6c:26:dc:a4:da:fb:9f:e6:
34:71:9b:4e:3a:18:ae:1d:f2:fc:59:57:be:7e:d1:10:8e:bc:
ef:b9:e0:75:79:f3:f9:fb:b9:d8:a0:43:7c:cd:1b:25:80:27:
ee:56:3a:d0:6a:c7:67:cd:52:fe:de:06:60:09:54:1c:5b:46:
c0:fe:c3:c0:a2:d2:f2:13:1e:f2:e5:cb:7a:57:67:29:9f:12:
39:8f:3f:98:cf:45:8d:7a:8e:e6:4a:1c:87:d5:e5:39:a7:29:
55:5d:e6:47:95:59:26:b9:76:76:d9:ad:aa:a1:85:d2:c3:86:
4f:d8:ea:cb:e6:7e:52:60:d9:ca:91:4f:de:a8:a8:bc:ea:9d:
cf:0f:fc:67:5b:61:89:5b:90:75:73:32:b8:57:8b:35:77:c8:
9d:53:fe:3c:ac:bd:ce:2f:5a:93:05:88:a2:9e:d7:00:c9:e3:
9c:ea:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:53 2026 by rpki-client