
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vqr94cBlHo7P2kqDVVuyyyzJR24.cer
File: Vqr94cBlHo7P2kqDVVuyyyzJR24.cer (raw, json)
Hash identifier: gbyP11dzVGE7Oegi7iQSD95oCj8iZyu9HLQkhcwWpu0=
Subject key identifier: 56:AA:FD:E1:C0:65:1E:8E:CF:DA:4A:83:55:5B:B2:CB:2C:C9:47:6E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F0A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 00:48:03 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32522 (0x7f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 21 00:48:03 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91DCF4D, serialNumber=56AAFDE1C0651E8ECFDA4A83555BB2CB2CC9476E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:76:f4:80:44:66:fa:4d:6f:83:84:5b:2a:
46:24:42:d1:3b:ad:ac:01:ac:30:f7:15:14:19:0b:
de:80:72:5d:e2:06:16:0c:70:56:a6:99:ec:67:f2:
e4:a9:08:4b:27:ad:0f:8b:41:0e:83:10:bc:4b:6f:
ee:5b:03:b8:ad:2e:32:72:ee:de:8f:28:73:3e:f0:
77:9b:e6:32:04:61:10:7c:3f:86:63:a5:f5:4b:5b:
70:2c:ce:c4:13:c2:ab:7b:29:c4:3a:f7:ba:18:91:
1b:8b:43:10:30:d6:56:00:e0:55:18:85:93:8a:a5:
3e:79:4f:8e:2a:8b:41:68:74:1b:77:f5:67:6f:bb:
c4:8f:cd:3e:0a:03:64:99:c5:a6:d6:de:cd:e8:e0:
3a:7d:57:86:81:a0:78:80:ca:81:c5:b2:65:53:10:
5f:9b:86:cb:f6:1b:b8:64:5b:5f:c0:e8:29:e5:69:
10:81:8a:09:71:46:d6:ed:f5:d6:68:ab:5e:87:57:
ff:89:02:fa:16:8d:10:30:31:67:7b:89:fb:ca:f6:
2f:1a:c1:73:14:ef:11:a7:2e:c9:f6:02:1e:21:c5:
c7:6e:1d:34:04:2b:1c:4a:d1:50:a1:fe:72:4b:17:
60:3f:6a:15:e9:87:61:5f:ad:d8:71:85:5d:0c:0c:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:FD:E1:C0:65:1E:8E:CF:DA:4A:83:55:5B:B2:CB:2C:C9:47:6E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.107.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a6:c8:66:98:cb:7f:ec:08:b3:a8:ab:79:6d:ca:54:b0:06:
25:ae:6f:ee:56:83:2c:75:f4:6a:9f:f7:31:00:10:ed:e1:b5:
bc:b0:7a:e9:b9:d2:d3:57:75:40:2b:ba:c1:d4:4b:8d:d3:1b:
d5:d9:f5:76:5d:9c:0e:96:48:90:16:a8:7c:9a:5e:3c:6b:84:
ab:76:a1:c3:e3:4f:6d:c4:25:8f:7d:ae:e4:81:04:aa:a9:4a:
8c:16:07:b2:cc:cb:65:e3:84:13:90:77:83:d4:a6:19:4e:53:
ea:56:a2:cf:9a:5a:40:1f:60:27:bc:63:4c:29:20:42:ff:35:
ea:fe:28:2f:41:d5:b5:cb:7d:a1:ce:2e:f2:7a:00:c4:5a:a8:
83:f4:85:0c:83:08:84:6b:35:d0:af:f4:65:70:8b:f6:63:fb:
04:2a:62:5e:0b:0c:94:64:8b:1b:27:b3:8b:fc:36:18:5c:f1:
2c:3c:63:17:2e:a6:75:72:3f:84:b6:23:f8:93:92:28:bb:26:
4a:93:75:71:8b:c0:6c:b9:51:87:04:8a:ba:44:4e:ec:d6:8c:
04:1f:c2:32:a8:c2:9b:90:cc:7c:00:ad:fa:07:a6:54:96:70:
b5:29:c4:ee:7f:f6:60:71:c6:59:fd:4c:80:58:96:b5:2e:4f:
be:b1:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:34 2026 by rpki-client