Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
File: vIx594SRodWqRdvkEzwMEPaTZK0.cer (raw, json)
Hash identifier: Ey63w377NhwCsFCTFm1lf9++XsMinwtXa4oy/+2Zuwk=
Subject key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7496
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:39:19 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29846 (0x7496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:39:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:34:4e:fc:16:d8:b8:fe:2e:6a:69:5a:29:
a2:96:24:a1:b6:d1:58:4c:b3:89:eb:5f:ea:58:7b:
ac:96:19:a0:41:03:a2:e8:99:a2:e1:45:d5:ad:7a:
a3:4f:d7:66:be:66:87:6a:a6:45:29:32:e7:20:14:
87:e7:c5:31:a0:23:db:8b:95:6b:49:57:c5:22:f0:
21:e0:29:e6:85:d1:e1:1e:98:05:0f:db:8f:bd:9c:
4c:8e:27:0d:0d:21:16:27:20:3e:a7:9d:e2:92:35:
ea:00:f9:63:ac:61:47:35:f9:ef:6c:c9:c6:ae:69:
4a:06:3f:21:e7:f8:d2:f4:85:54:3b:e5:46:04:5a:
c2:ac:fd:7e:6d:92:87:ed:94:45:83:b9:12:6e:8c:
e1:48:8d:cb:75:92:bb:ed:ce:33:83:3f:80:48:3a:
01:ce:0c:89:fe:1c:f2:1a:29:68:80:5a:44:51:15:
a2:7d:c0:20:0b:40:c3:00:8f:c8:a1:fe:8a:26:46:
5a:09:84:80:d5:c7:c5:a2:7e:9e:40:dd:c6:c7:dc:
c1:32:2d:43:53:af:67:5a:0d:65:56:74:2d:fa:a0:
4e:c5:7a:2a:3a:f9:36:85:f0:8e:f2:79:59:5e:51:
40:f4:05:36:55:6b:01:aa:1c:ca:0c:9e:d5:56:05:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.204.0/23
Signature Algorithm: sha256WithRSAEncryption
11:4d:ef:01:1e:cc:88:56:3f:98:4f:f1:98:aa:c0:21:35:5e:
9a:93:93:df:f2:ac:9b:62:e3:c4:52:2a:fb:e6:13:a5:ce:3c:
53:07:38:36:60:f4:78:46:ac:92:3b:7c:73:64:d0:fa:38:5d:
a9:05:0d:6e:ff:5c:8f:23:20:d3:7a:16:25:61:62:3b:44:48:
52:0b:ae:30:cb:fb:28:65:0f:c2:50:6c:8f:a4:fb:ed:48:ff:
9e:35:10:9c:f7:a8:28:0a:86:15:41:87:27:a6:36:f0:39:e3:
02:04:a5:f6:8c:1f:f0:b9:75:f5:c5:42:72:f3:ba:8e:65:57:
26:08:bc:2e:c8:7e:98:f8:f1:98:f7:29:20:72:bb:fc:80:87:
17:c7:2c:10:f6:bf:d1:f7:8b:65:2f:07:83:d7:fa:89:ec:c7:
c0:af:cf:40:61:a9:a9:43:f3:9c:b0:79:4b:3a:d5:f8:38:a9:
5d:55:06:22:87:24:09:53:5e:7a:02:8e:c2:8e:5e:6a:69:ad:
7e:c0:8e:16:7a:31:d2:6f:ab:4a:b3:18:cc:af:c5:c2:92:cb:
e2:4e:06:21:29:94:1a:fd:53:9f:c2:1a:4a:fd:a2:d5:69:53:
aa:4a:86:bc:71:8d:5e:47:ef:90:2f:b3:32:9a:d7:b6:59:ba:
a2:6c:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:39 2026 by rpki-client