Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer (raw, json)
Hash identifier: YqXA8wLkq23Q7qBnqJ89F3/UFFOagrvHw/2KZ+WV4B4=
Subject key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B65C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 May 2026 13:28:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 141995
IP: 103.164.54.0/23
IP: 2400:d320::/31
IP: 2407:3640::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177756 (0x2b65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 13:28:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:4f:95:be:82:dc:60:9d:aa:50:e8:37:6c:
2b:60:08:a9:20:0a:7c:a7:cc:82:ef:4b:53:95:cf:
f6:c6:cb:db:25:8e:59:c9:d2:9e:8d:22:52:eb:4c:
90:d7:21:9f:19:c8:f8:64:29:77:2f:1b:1e:84:f1:
3f:fd:ae:bb:99:e4:d4:bc:ff:0d:7b:fc:98:63:20:
e1:0d:2f:e6:4a:70:95:67:e6:fd:e3:7a:2a:82:46:
48:7d:a9:6e:b4:18:43:f2:e7:b3:27:b7:75:b0:ae:
39:bf:0c:b3:0e:31:14:de:60:2b:49:72:eb:f8:e0:
df:bb:d2:3a:f9:a6:bc:90:f2:7d:ca:1d:0d:8c:36:
2c:d7:f6:fb:dc:31:2a:ca:6b:de:44:f7:dd:f8:97:
b0:d3:b8:a0:30:f7:39:cb:d0:09:e0:57:b5:b1:d2:
e6:39:51:86:bd:16:92:b6:0b:4b:11:cc:57:bc:d2:
ef:f5:5e:94:bb:72:6d:69:97:30:ef:6e:fa:4c:13:
c4:f7:d6:bb:9f:3e:f3:07:b9:3e:a7:ad:f0:a4:42:
d2:4d:a7:45:52:74:b8:1b:43:db:31:ff:91:19:5a:
52:7d:31:c7:18:62:9c:2b:4e:8d:f7:80:ac:ff:0d:
55:8a:39:29:b3:ce:6e:03:44:c1:a6:33:c2:60:35:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141995
sbgp-ipAddrBlock: critical
IPv4:
103.164.54.0/23
IPv6:
2400:d320::/31
2407:3640::/31
Signature Algorithm: sha256WithRSAEncryption
9c:65:61:38:bc:70:68:63:3d:d7:03:ce:8f:c1:f6:9d:2f:c2:
39:cc:ad:06:8b:b4:c6:f6:9d:06:a6:05:27:0e:35:59:f5:11:
5a:ab:4b:f2:f2:89:a2:7b:ac:fe:cf:d8:77:12:3c:76:43:38:
c2:25:2e:fc:32:78:05:0a:58:c4:be:68:80:03:25:97:c4:8a:
22:69:b7:ee:4c:88:ef:62:19:b5:e0:b6:ba:74:20:20:49:e6:
ad:b6:c9:d3:66:93:61:22:e2:3f:06:21:fe:6c:62:8c:61:dd:
22:ae:05:67:dc:ec:1f:9b:d0:37:12:70:09:cb:1c:e7:53:61:
e8:19:cc:f1:1e:2d:90:05:b8:1d:25:1a:c5:63:5d:2a:67:77:
3d:5a:45:6a:90:93:fc:96:cd:f8:a3:da:d3:e6:19:dd:95:0c:
50:6b:dc:3c:b0:5c:98:50:fe:f7:65:31:6e:8a:21:bf:78:1e:
b4:95:f0:b2:2f:3f:b6:f2:99:c0:88:c6:1c:92:34:35:d3:d7:
ff:1a:a9:6f:bc:cb:7e:75:8b:d2:e7:fd:21:af:2d:e8:a8:44:
08:b6:80:79:01:54:cc:d1:7e:7a:87:1b:fb:94:7c:64:26:6b:
e9:48:9b:e9:45:34:67:9b:23:89:91:5c:3a:04:1f:0c:3b:8e:
27:96:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:51 2026 by rpki-client