Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
File: VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer (raw, json)
Hash identifier: i02ChnoU+1bTZ3nBLi/zoX/GIOjZndmMZXOfIhNAGcs=
Subject key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0292F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:12:55 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.116.224.0/22
IP: 103.20.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168696 (0x292f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:12:55 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:42:21:55:fc:86:7b:67:9c:bc:b5:44:f1:
99:1e:6c:ad:a5:49:97:74:06:dc:33:6c:bd:d3:28:
2d:00:d1:ca:de:7b:f4:d0:7f:91:11:ec:34:7d:54:
c2:5d:61:c6:c9:f4:11:36:d6:2d:24:32:11:4b:ea:
d8:fc:78:39:b6:94:1c:6b:85:60:b5:c3:34:28:4e:
d8:12:02:88:a7:9e:93:be:84:c7:03:1c:87:8e:6f:
26:c6:64:32:ab:d7:08:78:40:c5:3d:03:d8:13:84:
fe:cf:4e:a7:50:1c:58:2a:6a:7c:6b:b3:25:78:0e:
c7:46:60:41:31:42:d0:9f:92:bf:02:31:46:fe:b8:
9e:3d:91:6e:7f:03:df:f9:e2:ca:8a:77:0d:e1:36:
b6:39:66:52:79:a7:2d:e0:bf:a7:53:30:78:2a:32:
c5:2b:78:70:58:7f:8f:ff:92:a5:6a:4b:e1:cc:b0:
28:d5:7e:92:fc:6e:4a:4b:54:09:a3:25:ec:a1:63:
aa:ba:96:a4:38:99:db:4d:c0:79:c4:ce:96:f4:90:
97:c5:43:c5:cf:d0:01:55:b2:41:bf:51:12:a8:bb:
69:5a:0d:22:40:ed:15:f7:ff:37:24:42:37:e9:39:
17:95:c3:83:de:d1:af:6f:a7:ec:00:5b:b6:4a:a0:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.224.0/22
103.20.72.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a3:5f:26:6f:dc:08:64:00:08:27:79:30:9d:c0:d7:b9:fe:
a2:c3:1c:81:56:dd:e0:72:22:ac:ee:61:dd:6e:3a:9c:79:c6:
7c:4d:a3:ce:1a:c0:17:62:7d:f8:77:d5:ff:77:40:6b:46:9f:
93:44:cd:52:6b:68:fc:23:00:bf:66:8b:d4:f1:1a:a4:c7:29:
96:74:f5:99:c6:ed:2e:95:85:3c:5c:3b:55:03:cc:f1:b8:75:
28:78:41:5d:60:6f:d2:2c:92:d9:e3:c6:d0:4e:da:51:d8:04:
31:0e:bf:27:50:10:17:ce:82:56:72:a1:83:32:25:1f:c7:bb:
3e:fc:62:8f:77:92:37:4d:99:fc:72:36:33:4c:89:ff:c5:48:
fb:5d:cf:05:cd:f1:fa:5d:09:8c:6c:84:0f:ab:79:84:c6:bb:
8e:ea:2b:98:5b:53:ba:77:3f:24:d8:6f:ff:e8:66:e5:ae:2d:
8d:88:0b:4b:10:46:70:8d:88:5e:ac:10:3f:a1:22:fa:51:bb:
41:ac:71:6d:36:2e:3f:15:14:2c:57:b5:97:c7:45:ba:3b:42:
83:0d:91:1d:08:7f:c0:1e:21:70:54:68:c0:b0:73:ff:31:ce:
c4:81:ae:1b:a7:b9:5a:04:ac:2f:4a:ae:33:a6:83:4e:ac:8e:
25:a4:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:55 2026 by rpki-client