Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
File: VB3RXhVOUI-wD9skXE528q09iB0.cer (raw, json)
Hash identifier: ZK/2q7bq0t7UoX/kM49gwx9IuWnNsd4eQF3EAPeE8Os=
Subject key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029821
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:38:24 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.82.16.0/22
IP: 2401:4bc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170017 (0x29821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:38:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:1d:ff:9a:bd:35:8e:12:72:14:9c:3c:ae:
04:f5:65:9e:fe:2f:a3:68:ee:ba:d5:e5:d0:0f:ad:
f3:24:c1:3d:d0:8e:41:0d:6e:7c:f8:28:4d:a4:b1:
25:07:63:fc:53:54:bf:34:57:2b:87:7c:13:15:3c:
30:74:46:db:34:a6:0c:0c:0b:77:6c:b0:de:ca:2c:
73:4a:13:87:36:c6:dc:74:f1:8f:f6:84:a0:22:90:
57:64:47:03:0e:b2:36:86:d4:28:7d:5c:a2:38:c6:
5b:6b:b3:25:8f:4b:27:62:85:68:35:62:9b:41:17:
5b:1e:0e:43:84:36:e1:68:06:aa:95:d8:a4:2c:af:
b5:f1:dc:57:d9:79:af:72:9e:1d:a2:7a:58:be:bc:
be:30:0a:30:58:e3:67:26:df:b8:f7:32:cd:f5:61:
11:35:1b:b3:94:7d:6f:8c:d7:87:d0:d3:88:88:87:
54:8f:65:89:68:ef:d4:b0:1f:af:f0:d9:80:67:88:
e7:5e:a8:62:82:28:71:7d:ed:bb:26:2d:ee:15:27:
70:53:35:ab:cb:85:ca:d4:d5:14:5b:fd:ff:11:67:
ab:b1:c2:09:85:db:ad:9f:42:c1:e4:4e:7f:66:69:
25:e9:e8:d0:91:5c:b3:fc:cb:bc:45:ef:d0:8e:77:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.16.0/22
IPv6:
2401:4bc0::/32
Signature Algorithm: sha256WithRSAEncryption
76:8b:8e:26:d8:38:20:7e:45:bc:7c:2c:d1:a6:2b:11:0f:79:
82:47:00:7b:f0:5c:da:49:11:98:10:04:51:ab:83:98:3f:0d:
ae:10:23:14:f6:b6:dc:b4:cc:39:1f:e9:09:d7:fb:9e:61:36:
32:18:4f:f4:cf:bf:a7:b7:c1:79:d4:4d:e6:b4:2e:a9:4d:b4:
de:86:6c:54:24:b1:25:0b:a3:4e:7e:c2:51:f1:71:e4:a0:86:
5a:08:b6:f8:59:32:0b:0f:5a:df:c7:36:75:6f:b5:24:74:a8:
7b:ab:50:72:94:80:f1:ab:0f:12:59:4f:67:14:04:8c:ac:4e:
c8:27:5e:79:3d:fc:5d:e7:70:c1:1f:1c:0e:88:39:d3:f4:38:
74:44:fb:d0:2b:d9:66:e3:ff:a7:90:42:8b:50:a1:fa:c6:5a:
c6:4f:81:53:c0:b0:52:cc:43:a0:4a:c0:53:87:8d:24:55:26:
45:fd:45:67:1b:2a:4b:2f:49:fc:0d:3d:36:ca:85:ab:4b:99:
c2:b2:5c:b6:9b:bc:94:cf:46:e6:bc:b7:64:09:53:0b:62:ff:
4b:12:c5:78:07:d4:ad:38:a7:b6:07:ab:3a:f8:8a:42:60:55:
1c:49:d1:84:47:87:4c:8f:a6:96:f1:09:5f:cb:2a:f5:34:a6:
db:ba:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:21 2026 by rpki-client