Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
File: VB3RXhVOUI-wD9skXE528q09iB0.cer (raw, json)
Hash identifier: 07Y256AsxtcmxyjbO51SLcfJTla4V7dRAHLnQSysnoI=
Subject key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02573E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 20:17:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.82.16.0/22
IP: 2401:4bc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 12 Aug 2025 22:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153406 (0x2573e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 20:17:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:1d:ff:9a:bd:35:8e:12:72:14:9c:3c:ae:
04:f5:65:9e:fe:2f:a3:68:ee:ba:d5:e5:d0:0f:ad:
f3:24:c1:3d:d0:8e:41:0d:6e:7c:f8:28:4d:a4:b1:
25:07:63:fc:53:54:bf:34:57:2b:87:7c:13:15:3c:
30:74:46:db:34:a6:0c:0c:0b:77:6c:b0:de:ca:2c:
73:4a:13:87:36:c6:dc:74:f1:8f:f6:84:a0:22:90:
57:64:47:03:0e:b2:36:86:d4:28:7d:5c:a2:38:c6:
5b:6b:b3:25:8f:4b:27:62:85:68:35:62:9b:41:17:
5b:1e:0e:43:84:36:e1:68:06:aa:95:d8:a4:2c:af:
b5:f1:dc:57:d9:79:af:72:9e:1d:a2:7a:58:be:bc:
be:30:0a:30:58:e3:67:26:df:b8:f7:32:cd:f5:61:
11:35:1b:b3:94:7d:6f:8c:d7:87:d0:d3:88:88:87:
54:8f:65:89:68:ef:d4:b0:1f:af:f0:d9:80:67:88:
e7:5e:a8:62:82:28:71:7d:ed:bb:26:2d:ee:15:27:
70:53:35:ab:cb:85:ca:d4:d5:14:5b:fd:ff:11:67:
ab:b1:c2:09:85:db:ad:9f:42:c1:e4:4e:7f:66:69:
25:e9:e8:d0:91:5c:b3:fc:cb:bc:45:ef:d0:8e:77:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.16.0/22
IPv6:
2401:4bc0::/32
Signature Algorithm: sha256WithRSAEncryption
c0:cc:4e:8c:d1:dc:d3:c7:36:0f:43:92:26:50:1f:4f:d3:57:
7b:8c:13:49:77:a8:af:54:eb:12:df:19:84:a0:d3:fd:0f:ff:
7e:75:e5:6d:45:35:c7:c0:25:92:ec:1a:9f:fd:5d:89:d0:e3:
69:8a:6e:97:b5:96:bc:ae:8a:e3:d7:43:51:c9:18:b2:45:e9:
a6:33:18:9b:17:02:c8:be:ac:aa:7d:87:35:3f:ce:85:bc:dc:
90:d9:c7:f8:46:99:13:3b:03:2a:1b:69:e8:8b:f3:db:12:60:
21:b9:bc:a4:0f:3f:a2:e6:fd:cc:e3:5d:68:4f:13:6c:35:d9:
f0:dc:85:37:23:2d:b9:e8:d8:7e:dc:92:9e:5e:88:10:7d:87:
79:35:03:54:3e:6f:2f:29:10:c3:fa:3b:fe:a1:59:be:52:c2:
76:d5:2f:a9:84:15:e2:9d:3b:a7:9e:d5:06:27:ce:f9:5e:86:
1a:f0:0f:ee:eb:2e:39:72:24:2e:59:e9:b8:15:23:03:00:fc:
d1:b5:c5:69:11:56:28:c4:dc:16:a7:9b:ac:e5:0c:2f:a5:98:
38:4d:59:4c:0a:79:7b:ba:ef:b9:0f:2c:0b:b3:f4:96:8c:b0:
85:dc:7d:b9:51:db:3b:42:63:8b:4e:63:d2:b6:cc:58:0b:02:
11:c2:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:36 2025 by rpki-client