Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer (raw, json)
Hash identifier: tdqD6sLa1TpbzpEUXWaILVEb1p7dSolFjGVCOt7sAJ8=
Subject key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0293A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:16:12 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134597
IP: 103.55.242.0/23
IP: 2001:df1:b4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168873 (0x293a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:16:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:02:ab:6d:0d:7b:31:5e:20:07:d1:24:b6:
83:d5:47:f6:eb:56:a7:0a:e4:e8:ba:9d:74:92:42:
17:8a:25:7b:df:e0:3e:b0:58:ab:a8:36:a0:81:fc:
92:8d:00:0d:ca:43:6c:9b:10:04:7d:6a:12:60:0d:
fd:4d:d4:ce:16:b9:51:f5:78:f0:95:e5:3e:c2:db:
7b:1f:9d:d9:7b:dd:37:2b:a0:ce:05:b0:d2:9f:5f:
ed:29:c4:90:6a:82:02:ca:78:1f:90:a4:15:6f:5e:
2c:7a:b8:2f:24:e8:34:37:9a:fb:79:d0:a2:ac:16:
c2:1d:07:50:35:40:4e:63:37:2e:9f:0b:92:27:9a:
1f:07:cc:53:34:3b:8c:35:10:9f:49:35:dc:82:c0:
4c:ba:b0:3c:01:b3:d7:ea:21:27:6d:6e:de:b5:c3:
15:42:e1:ff:79:a6:80:96:7e:5c:b4:c5:ad:7f:d2:
f5:52:54:22:b4:8c:72:95:6f:8c:3f:92:6f:7c:56:
95:85:48:08:fa:ad:d6:d6:63:9f:26:f9:f2:40:39:
09:60:b2:0a:83:01:d7:8c:52:48:7b:c7:6e:cc:61:
d8:8c:cd:03:2f:78:2f:59:59:d8:ac:ec:ec:fa:19:
6b:76:41:18:dc:2a:6c:f8:01:1f:88:16:1c:84:02:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134597
sbgp-ipAddrBlock: critical
IPv4:
103.55.242.0/23
IPv6:
2001:df1:b4c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:0b:47:cf:e2:1a:2c:fd:21:20:43:7f:fe:c7:bf:f9:b2:7c:
38:22:80:de:fe:7f:ff:6b:6c:c2:a1:b9:be:07:56:4e:9b:c3:
96:c0:58:43:47:4d:8c:95:51:3b:ff:dd:02:b2:4a:82:3a:af:
eb:25:57:f8:43:8a:92:79:f1:fe:76:e6:aa:48:92:dd:4b:d0:
d4:6f:8f:7e:69:e5:28:e6:7f:c2:ca:7e:b8:94:1f:d5:ff:f9:
aa:36:08:77:d8:11:87:60:90:8b:5c:f9:89:64:72:7d:ad:35:
5c:90:d3:be:58:32:8e:83:c3:2f:de:ba:99:d8:10:8d:ab:08:
84:55:7f:cb:fa:f9:b1:3c:cc:9a:76:f7:46:61:72:7f:53:c1:
b4:ae:99:e4:28:f9:cd:1d:88:2b:25:8e:53:14:59:a2:3e:ef:
3f:03:e1:1b:92:aa:d7:78:f0:f6:77:46:b2:3b:f9:b1:b6:13:
88:fb:61:3e:92:d6:b8:cd:90:b4:b4:47:cc:15:5a:75:6e:5b:
06:81:d7:e1:5c:5b:8b:27:00:75:ef:3b:a3:fe:bc:c8:c7:29:
8c:5d:a0:41:0d:34:05:0a:29:61:ed:89:e7:a1:92:d3:38:13:
60:90:8a:ee:9d:2d:a9:80:06:3b:26:b5:c3:72:ad:36:4e:60:
73:3c:6a:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:25 2026 by rpki-client