Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer (raw, json)
Hash identifier: 7qFydG6i0ZUQqFxWv/pokfpkG+f09mfhmH6SaBJnTPo=
Subject key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C5D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:57:00 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154449
IP: 2001:df6:7a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171101 (0x29c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:57:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:4d:1f:ec:7f:5e:8f:fe:85:0e:cd:fd:dd:
41:12:d6:6e:c0:7b:90:b1:9f:74:46:85:b6:d6:78:
1e:15:6b:7d:ed:1e:67:7b:b0:bb:59:93:56:ac:b8:
ea:2e:99:ff:2f:b7:ec:4f:ec:a2:df:db:5f:42:eb:
4a:f9:cf:9f:5b:10:5f:ac:87:23:42:3f:0e:f4:b3:
6a:f7:18:99:15:8f:8a:c2:cc:33:6d:ce:49:93:f8:
d3:be:1c:3b:16:76:fb:9f:e4:ea:79:39:72:f3:55:
0a:e8:0b:40:56:2a:04:20:b7:da:40:73:7c:fb:b2:
cd:9b:4e:57:ec:f4:e0:80:e7:cc:f6:2f:56:86:36:
85:9a:35:a8:fa:7b:a2:81:92:35:d5:93:b0:13:f0:
be:fc:c0:3d:b6:5b:53:36:f2:70:26:ef:f8:75:dd:
01:ab:a9:9d:da:de:26:20:65:fd:74:03:41:04:5e:
81:44:f6:6d:35:8f:70:49:d7:5a:9c:3d:08:6e:90:
5b:6b:66:1e:16:26:6f:84:60:a4:9b:96:91:c0:9b:
5e:32:bb:8d:b3:17:70:6a:0d:18:a6:2f:66:e1:9b:
c5:77:35:7f:06:06:74:f5:58:11:d0:09:b4:12:7e:
9d:41:7a:88:ad:7c:23:b4:cf:d9:8f:5f:f7:e1:89:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154449
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7a40::/48
Signature Algorithm: sha256WithRSAEncryption
97:4e:2b:98:9a:92:2e:ab:3c:df:7f:a1:df:88:e3:24:8e:df:
fd:4a:24:69:80:05:9b:03:de:e5:7a:14:87:69:5c:9f:e9:3c:
7b:de:ca:5b:a9:a1:e9:15:18:3a:cc:9d:62:a1:6d:7a:e0:99:
4f:1a:9b:01:78:f0:77:2a:ab:e6:2f:b3:bf:c6:d9:30:e9:54:
ef:0e:5e:eb:3e:8b:28:58:ce:c2:10:48:5b:37:a0:a5:98:fc:
61:e2:d0:be:77:87:f8:a3:a1:4a:19:01:d6:ba:0d:1c:ec:a1:
10:9a:a0:53:11:63:a6:c2:4b:8c:e8:02:e3:ff:e3:0f:b2:55:
30:11:e9:3f:c4:c5:1d:54:45:ce:d6:52:81:81:f5:c3:46:49:
e6:ef:92:f7:bf:31:bc:1f:7f:e9:05:52:e2:21:ab:3b:71:72:
64:ef:5f:01:ed:c8:34:e8:0e:e1:9f:37:2b:ff:b8:53:0c:59:
c2:1c:0b:68:2c:68:50:12:3b:62:5e:f6:5d:86:a4:f9:ad:07:
cc:2f:01:98:73:6e:5e:64:b8:30:51:cd:27:f6:9c:93:42:98:
47:4a:c8:5b:10:d9:31:07:bf:67:02:15:de:8a:73:bc:f0:c4:
50:4f:43:fe:c6:4c:fb:d2:61:95:85:8f:a2:9b:8f:4b:a9:06:
be:48:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:51 2026 by rpki-client