Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
File: vttNMcgBx4se-jSHY50DVayRNUs.cer (raw, json)
Hash identifier: Sof+oWrXhpWBnLq4jYGsx25bgYIdiKzW0L8hBHTCfj0=
Subject key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7854
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 08 Mar 2026 14:07:47 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.220.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30804 (0x7854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 8 14:07:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:21:b0:90:12:dc:ad:0c:dc:a2:e7:16:80:
c4:03:f0:4a:1b:e2:03:f2:ca:c8:a1:e1:0d:48:6e:
23:b4:1b:70:74:79:60:94:b8:54:71:a0:78:96:25:
1f:a0:c0:2a:4f:65:b2:50:34:96:ba:65:cd:b4:80:
62:5a:55:d6:42:c8:91:8a:e0:db:a1:59:30:ec:2e:
00:4b:1e:5f:16:52:1a:0a:f8:b0:f3:5b:3a:c1:cb:
59:eb:68:89:47:48:11:b0:94:0a:d1:d4:e2:be:c7:
7d:d9:a1:3c:a5:be:99:fb:29:b2:f6:9b:d8:43:47:
32:7d:4b:bc:66:94:d5:20:4b:c1:a7:a1:fa:d7:02:
1b:3c:ed:8e:5c:97:08:5c:e6:22:96:46:66:0e:48:
5b:2a:0b:7c:5c:26:8b:0b:bb:6c:1d:ea:97:c3:11:
66:8d:e8:e3:e7:95:0f:f7:30:3b:6d:98:02:3a:4b:
42:0c:11:a6:d7:29:8d:d7:57:c8:a9:83:5a:53:43:
52:aa:c4:65:78:d1:d4:fe:f7:5e:17:70:54:6b:39:
e2:c0:ae:90:f3:e3:db:87:0b:ad:ec:34:b6:3d:53:
13:52:c7:90:f2:ea:d7:54:fa:2a:fa:95:8d:29:4e:
12:f8:4f:80:f5:7e:3f:d3:12:92:3d:d7:68:88:71:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
18:42:5a:fa:e8:71:69:bd:51:db:e8:5b:e4:f7:a2:4d:36:d5:
de:5a:3a:18:d2:3c:a9:2b:68:ec:e3:0b:5a:8a:66:37:38:32:
a2:2e:b8:8d:e3:a5:bd:ba:44:de:99:fd:a2:3b:92:df:25:2a:
f2:9a:dc:30:84:b4:5f:e8:51:8f:01:40:cf:fd:c3:50:4d:35:
12:80:4b:71:21:5d:bd:33:26:24:f3:ee:be:01:87:ec:16:6a:
f9:b7:25:60:7d:c6:7a:e0:40:d7:43:08:6b:f6:f7:7e:3f:29:
93:5c:72:9b:4a:bf:4a:29:6b:19:9d:5d:7c:bb:17:e8:31:94:
03:e8:39:0c:72:43:df:03:4a:9d:ec:45:6f:cb:f1:ba:e6:93:
8e:2a:4d:bb:b4:6d:5d:51:99:f8:41:02:09:8f:9e:1d:81:1c:
15:88:fb:24:ce:02:2e:e4:e0:d4:e2:21:a9:16:c8:73:60:8a:
72:0b:91:e7:9d:d5:66:9e:c8:72:b0:bc:e4:97:09:dd:b2:6c:
7a:65:e3:24:d5:87:8b:40:2e:79:02:5e:57:f2:3e:b6:8f:0f:
91:f3:cb:a0:44:eb:ac:dc:75:c4:f2:11:4e:f7:8d:8a:c2:89:
07:cd:c4:31:7d:ce:20:e2:c1:a1:6c:a5:ca:46:fe:a3:0b:09:
84:4e:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:23 2026 by rpki-client