
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
File: votHM7Guikc2t-kTJzPWVAkePSs.cer (raw, json)
Hash identifier: qTwrr5ct60/zb4e14rG/INTiwfcE/nH2aD9H3WKlR9s=
Subject key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7563
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:02 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30051 (0x7563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:02 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:35:03:00:dd:8a:28:b0:60:eb:7b:d2:f0:
ab:6a:5f:05:91:53:41:7e:2c:55:bd:20:67:66:38:
d7:3e:f3:c0:fb:0f:51:2a:d9:34:da:0f:52:79:66:
69:61:12:ed:1c:98:30:4c:3b:6b:98:fd:01:ea:9c:
88:75:5b:54:f5:c3:6e:e5:62:87:fe:37:02:0d:e7:
44:b1:f9:55:1c:76:1a:3d:b9:07:af:d8:d7:c1:2b:
09:c2:be:39:cb:1b:3b:1a:42:cb:28:a6:b5:04:5c:
56:3c:19:00:d8:65:36:2e:74:ec:4b:5f:17:2a:d7:
9a:fa:2f:f1:b4:c1:0b:da:70:95:92:f5:0a:dc:d6:
f6:72:6d:53:aa:aa:78:b8:f0:92:f1:bc:10:22:8c:
b3:fc:01:a5:e2:e0:57:59:e1:b7:77:83:65:a6:04:
21:30:0b:ab:e4:2b:96:a0:d8:b0:61:09:af:6a:66:
28:bb:a9:e8:9e:ad:cb:f9:d8:db:bb:50:2d:f4:32:
e3:fd:97:34:58:6a:1a:c0:8b:81:f1:5c:68:4a:ea:
6c:dd:5f:1f:b7:a2:b0:62:b7:ad:bc:d8:58:b0:3b:
1d:d4:7d:44:e7:ad:2e:1b:4a:0a:91:4b:de:52:e9:
70:a4:df:67:45:4c:e9:fb:36:10:eb:00:b6:01:6f:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.204.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:e3:18:e0:8d:12:67:85:a9:d7:6a:e8:ff:1b:d1:6b:1c:a7:
de:b9:e0:5d:97:f4:71:99:d2:fe:c0:5c:2f:de:08:26:c5:da:
f0:6e:1f:12:b6:f7:36:d7:1e:2e:c9:c4:a3:09:3f:43:b6:e5:
69:d5:8e:37:08:75:d0:e0:0d:87:53:ce:22:fc:83:24:4d:0d:
2d:de:51:4f:1b:6c:57:11:ba:63:cc:e7:34:1c:db:e2:e8:05:
98:9c:5b:99:18:43:83:d2:d3:9b:26:bd:dc:e0:b3:7b:20:86:
3f:12:71:1e:54:0e:ab:67:ed:b6:8f:76:81:65:5e:9e:e8:5e:
35:4d:22:d1:97:23:a8:3f:c5:4b:97:17:60:bd:24:da:af:fb:
61:1f:47:c9:78:ba:c4:08:92:1a:37:b2:da:61:a9:61:3a:8a:
69:55:21:5b:77:c7:82:86:e3:24:a1:5b:e3:93:3d:06:3d:98:
41:5b:12:c8:fd:65:12:ad:46:bb:8d:ca:e7:8d:d1:6b:89:95:
54:45:87:3e:57:3c:90:59:12:64:b6:37:08:5d:98:e6:ee:58:
e6:ed:8f:6b:e5:61:3c:6b:67:0d:0f:de:8d:9b:0f:71:44:ab:
a3:3f:d2:21:d4:24:74:9f:2e:5f:91:59:39:54:32:8e:76:c7:
b3:fe:58:22
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MTAyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCMjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEz
MjczM0Q2NTQwOTFFM0QyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKhPNQMA3YoosGDre9Lwq2pfBZFTQX4sVb0gZ2Y41z7zwPsPUSrZNNoPUnlmaWES
7RyYMEw7a5j9AeqciHVbVPXDbuVih/43Ag3nRLH5VRx2Gj25B6/Y18ErCcK+Ocsb
OxpCyyimtQRcVjwZANhlNi507EtfFyrXmvov8bTBC9pwlZL1CtzW9nJtU6qqeLjw
kvG8ECKMs/wBpeLgV1nht3eDZaYEITALq+QrlqDYsGEJr2pmKLup6J6ty/nY27tQ
LfQy4/2XNFhqGsCLgfFcaErqbN1fH7eisGK3rbzYWLA7HdR9ROetLhtKCpFL3lLp
cKTfZ0VM6fs2EOsAtgFvBsMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS+i0czsa6K
Rza36RMnM9ZUCR49KzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjIzRDkvN0I4QkQ2Q0NDOUQxMTFFRjk3NUJEQzRCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIyM0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1
aWtjMnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6zDANBgkqhkiG9w0BAQsFAAOCAQEAx+MY4I0SZ4Wp12ro/xvR
axyn3rngXZf0cZnS/sBcL94IJsXa8G4fErb3NtceLsnEowk/Q7bladWONwh10OAN
h1POIvyDJE0NLd5RTxtsVxG6Y8znNBzb4ugFmJxbmRhDg9LTmya93OCzeyCGPxJx
HlQOq2ftto92gWVenuheNU0i0ZcjqD/FS5cXYL0k2q/7YR9HyXi6xAiSGjey2mGp
YTqKaVUhW3fHgobjJKFb45M9Bj2YQVsSyP1lEq1Gu43K543Ra4mVVEWHPlc8kFkS
ZLY3CF2Y5u5Y5u2Pa+VhPGtnDQ/ejZsPcUSroz/SIdQkdJ8uX5FZOVQyjnbHs/5Y
Ig==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:06 2026 by rpki-client