Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
File: vEIYikinqZ-W1q-yAR59yd7uIqU.cer (raw, json)
Hash identifier: h3AJlmEVtE7PodYfBbUEaWBlwc/rZAOGIcJcVgoVTeM=
Subject key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5563
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 12:20:04 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 79.109.1.0/24
IP: 79.109.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21859 (0x5563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 15 12:20:04 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:cd:0a:64:af:01:40:da:2f:ab:5c:3a:a9:
88:85:64:50:53:a0:52:33:24:8e:b3:ae:39:32:74:
81:dc:c6:6d:01:60:e0:4b:3b:57:30:ca:5c:36:16:
80:6a:ad:28:39:ec:b6:f7:87:29:34:4b:3b:e7:6c:
8a:2c:cc:4d:e5:44:ec:98:fc:8e:c9:f9:3f:64:5e:
c3:82:cf:60:a2:ba:6c:65:2b:a1:96:9e:40:4e:a4:
33:fe:b6:12:d0:16:4b:b1:78:a0:f9:fd:05:75:15:
a1:2c:36:fa:23:ec:a1:61:af:fb:89:9d:09:8d:94:
86:17:cd:21:4f:5f:da:57:3f:92:a2:0b:55:be:1f:
12:2f:93:ad:08:72:e7:68:d9:03:79:a5:7f:35:a8:
00:07:a7:56:92:e3:1e:67:86:0c:c9:b5:3a:0b:1c:
36:78:32:52:eb:e3:3d:a6:fb:78:ed:54:66:f2:2e:
74:05:a3:7a:2f:0d:af:f6:f3:93:ab:27:be:7f:e1:
06:e6:9c:e7:97:bf:a2:68:b4:3a:f5:27:40:e6:6d:
09:0e:15:07:55:47:8f:fa:45:df:6d:d0:7b:69:5e:
bf:da:d9:a6:44:50:39:a1:db:d2:a2:f4:1b:58:e1:
9b:9d:09:0e:40:61:9a:90:29:d7:4a:a4:5e:dd:23:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.1.0/24
79.109.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:79:cd:19:99:fc:00:b4:7a:98:e4:63:e1:d9:5c:8a:a0:19:
3f:42:04:50:96:1f:df:81:e2:63:6d:36:2f:02:64:8d:93:fd:
59:61:6d:37:76:11:44:c4:9e:87:b7:88:ab:14:82:5b:76:76:
60:aa:a2:a5:58:74:2f:2a:7a:45:d9:d5:72:4e:da:de:8e:d4:
ee:e1:62:f4:8b:37:14:f1:0d:8b:72:96:50:a0:bd:6b:d3:4d:
c8:a0:c9:7b:f5:d4:17:17:1f:68:94:c6:60:90:cf:20:7f:52:
be:78:73:ed:ed:75:55:1e:75:43:e8:12:9d:4e:cf:c2:8d:d0:
f6:7a:87:64:8b:db:36:c5:41:81:ed:1f:4b:1d:33:47:48:4a:
05:27:b6:11:fa:da:17:bc:94:a9:83:9a:f4:d8:dd:08:64:63:
56:e4:9e:75:8e:ac:ba:00:62:d4:91:60:df:0e:28:f5:08:f3:
72:06:56:58:35:b3:aa:59:9a:2e:e2:7b:76:a6:09:49:d1:80:
79:83:df:09:7a:96:b1:50:16:54:50:5a:17:08:da:e6:02:02:
8b:04:ef:b6:e3:b4:c5:b2:a1:3c:b5:c9:f3:ca:9a:5f:d4:58:
74:ac:7c:5f:93:03:6e:24:80:66:c2:90:81:c2:51:52:70:cd:
46:26:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:15:49 2026 by rpki-client