
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
File: bvj-zvM56m3paYzCxfWGRc9l794.cer (raw, json)
Hash identifier: Rukej5iOmatSHzxJ7dF5Tq3aoGgsnXuS8GqFy6tojho=
Subject key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Apr 2026 13:50:23 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 157.85.80.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31336 (0x7a68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 28 13:50:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:48:2d:fd:4e:c6:93:aa:8b:f2:93:47:a1:
c0:49:3b:25:fa:7c:0c:b0:6c:35:98:d0:43:42:55:
89:03:47:bf:a4:8d:0f:9f:ba:a2:87:2e:59:0b:3d:
3b:28:99:b3:06:b8:51:54:a9:1a:a9:bb:ea:e6:5d:
b5:02:a1:e3:a8:90:26:1d:ea:18:ee:2a:1d:05:54:
d6:a5:99:4e:d6:3f:df:5a:3b:28:f7:2f:0a:ca:a3:
57:77:f3:cd:cd:83:31:6e:9b:4b:5b:23:1b:9d:62:
a9:79:52:c8:6b:86:dd:81:a1:87:b2:89:a7:7e:48:
dd:13:42:50:e7:ce:c3:92:83:2a:ff:6f:7c:3e:43:
64:d1:ff:06:45:fd:f5:35:b3:22:a6:54:20:73:64:
c0:de:d6:7d:46:1b:8d:11:f3:1b:5c:d4:3e:1b:40:
b5:0f:41:a5:e3:d1:d5:60:12:07:3e:c2:80:49:7c:
cd:bb:47:d5:83:89:b4:33:5a:29:43:73:6c:68:6a:
b4:9a:73:fd:40:e7:63:b0:3d:41:1d:85:34:f4:bc:
96:be:46:f4:f0:6a:89:cc:7e:39:90:a1:e0:61:0a:
7f:0b:8c:04:3d:ac:2d:b6:ab:79:bc:20:00:db:47:
99:28:80:22:39:22:0b:84:1f:9b:e5:5a:26:82:13:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:d9:31:88:bb:60:a2:4f:3c:24:b7:d6:f8:c0:e7:32:4e:87:
83:42:3c:20:2d:f4:93:5f:08:5c:a8:83:08:a8:b8:ea:25:62:
7f:66:b5:d1:fb:ec:44:88:76:d1:41:fe:25:50:30:35:81:1c:
67:3a:a2:86:65:ac:51:e9:12:bc:06:f9:db:6a:73:b3:ad:16:
c9:d4:04:f7:ee:26:89:c8:b9:14:4f:83:57:88:38:60:bb:06:
d3:b4:21:f9:43:a3:79:c7:e0:87:01:51:e2:93:c8:3d:bc:92:
aa:58:31:05:a0:31:1d:fa:7d:1e:fa:30:83:7d:92:e9:52:2f:
b4:7e:f7:44:55:75:a0:91:2c:71:c3:7e:b0:7a:df:65:b2:fc:
75:8c:46:98:97:aa:aa:5e:34:b2:43:0e:1d:2b:c4:1d:a5:70:
8c:89:9f:12:15:7e:0c:21:7a:18:6a:24:86:07:37:43:22:c4:
3a:4d:85:e9:b8:61:ec:5a:52:2f:1d:75:9c:ac:70:1c:44:08:
8f:fa:d7:03:4b:da:f1:1a:92:cb:1c:69:7f:ab:89:d7:e7:48:
9e:d1:19:dd:fc:6d:8d:fa:e6:b1:7a:1a:b0:ea:22:b1:92:20:
0c:d5:20:57:ea:eb:fb:fb:16:1a:b1:89:f9:cf:af:74:3f:9a:
a0:2d:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:37 2026 by rpki-client