Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
File: VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer (raw, json)
Hash identifier: lqoCaCtG4qT28/pvgt1TAxG1QZZKxw4ZXv+g5dL5ht0=
Subject key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DDCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Oct 2026 12:56:03 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 45.116.224.0/22
IP: 103.20.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187854 (0x2ddce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 13 12:56:03 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:42:21:55:fc:86:7b:67:9c:bc:b5:44:f1:
99:1e:6c:ad:a5:49:97:74:06:dc:33:6c:bd:d3:28:
2d:00:d1:ca:de:7b:f4:d0:7f:91:11:ec:34:7d:54:
c2:5d:61:c6:c9:f4:11:36:d6:2d:24:32:11:4b:ea:
d8:fc:78:39:b6:94:1c:6b:85:60:b5:c3:34:28:4e:
d8:12:02:88:a7:9e:93:be:84:c7:03:1c:87:8e:6f:
26:c6:64:32:ab:d7:08:78:40:c5:3d:03:d8:13:84:
fe:cf:4e:a7:50:1c:58:2a:6a:7c:6b:b3:25:78:0e:
c7:46:60:41:31:42:d0:9f:92:bf:02:31:46:fe:b8:
9e:3d:91:6e:7f:03:df:f9:e2:ca:8a:77:0d:e1:36:
b6:39:66:52:79:a7:2d:e0:bf:a7:53:30:78:2a:32:
c5:2b:78:70:58:7f:8f:ff:92:a5:6a:4b:e1:cc:b0:
28:d5:7e:92:fc:6e:4a:4b:54:09:a3:25:ec:a1:63:
aa:ba:96:a4:38:99:db:4d:c0:79:c4:ce:96:f4:90:
97:c5:43:c5:cf:d0:01:55:b2:41:bf:51:12:a8:bb:
69:5a:0d:22:40:ed:15:f7:ff:37:24:42:37:e9:39:
17:95:c3:83:de:d1:af:6f:a7:ec:00:5b:b6:4a:a0:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.224.0/22
103.20.72.0/22
Signature Algorithm: sha256WithRSAEncryption
01:79:06:3f:05:8b:b2:ef:f2:7e:e7:72:8a:0e:82:35:58:7f:
9a:40:93:91:14:11:6c:47:47:2e:8e:9d:59:d1:d3:d4:5a:de:
f2:dc:21:5b:55:9b:ab:1f:50:18:44:b6:1a:4e:c0:eb:39:08:
36:ef:77:30:11:ff:34:32:71:37:18:5b:3a:b7:11:8a:17:2f:
c5:c5:39:c9:56:02:cd:a1:fc:7e:f8:b2:e5:6f:45:d7:a7:47:
c8:f5:8f:ba:4c:44:97:1c:af:d3:a1:5a:21:8b:9b:3e:ca:a8:
05:57:dc:6e:4f:d6:d2:d2:b7:87:e7:d9:49:e7:63:d9:8c:e0:
4c:a3:88:24:69:64:e5:4f:28:08:17:87:57:ca:79:36:3d:9c:
29:6f:23:a9:c7:a9:9b:2c:cf:58:cb:ae:31:a8:57:14:e1:ad:
03:ea:02:29:c1:92:78:b7:c6:6d:3c:fd:0d:1f:39:6b:e3:c7:
9f:e3:49:fe:50:64:05:6d:5e:be:1a:5e:32:67:62:77:5f:3a:
1d:18:14:db:97:9a:bd:81:10:ac:68:9d:a3:e2:a9:d4:c4:96:
3a:f5:42:e9:61:58:04:37:18:3e:76:e2:16:40:70:4a:b5:32:
5d:c0:1c:66:b5:08:ee:8e:26:03:6c:5d:15:ef:87:17:a6:0f:
7c:bc:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:24:50 2026 by rpki-client