Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
File: vKs-dvhO1DdC8qCBJCcI55nOG18.cer (raw, json)
Hash identifier: UMA//ixoxKZeahN2cIKS664r9lRWpZzPWdreK6AdJh0=
Subject key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 04:22:35 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 45652
IP: 43.252.120.0/22
IP: 103.233.80.0/22
IP: 110.34.128.0/17
IP: 2401:4a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174013 (0x2a7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 04:22:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:1a:bc:51:41:64:89:3c:1d:83:e1:1b:93:
66:81:65:3e:03:42:9b:e6:0c:9a:c0:d8:18:6b:7a:
d8:85:33:e7:77:fc:fe:38:35:61:9e:3b:47:22:ea:
65:71:df:b0:c0:91:18:53:24:ed:ff:96:dc:12:13:
cd:09:e7:5c:ff:2e:de:db:c8:6f:32:25:fa:b3:8c:
3b:66:01:34:7a:8e:2f:e3:da:e9:bb:f4:f6:5b:87:
8a:47:be:e0:2f:3a:13:04:41:1c:ec:08:18:a5:b2:
81:ed:9f:f3:85:2c:10:be:ba:37:83:17:b0:28:54:
a0:e8:77:a3:0c:ba:1e:92:d8:70:cd:43:d8:98:59:
a7:fd:a1:74:a8:7c:92:50:19:5f:52:a6:85:ba:38:
54:3f:76:d0:f0:05:cc:bd:57:8e:7a:48:d4:a8:09:
13:dc:af:b1:ca:e4:72:c4:c0:7f:5e:17:1f:0c:14:
4a:de:75:4a:3f:c8:84:fd:fa:55:e5:98:63:2f:6f:
50:d5:a7:d0:af:e1:3c:19:79:db:bd:23:76:cc:3e:
88:f7:cc:3f:a5:8e:e8:45:df:9e:7c:9a:61:d0:06:
ce:dc:92:79:cc:cd:94:51:93:a8:09:60:70:5d:2c:
5c:da:4b:ed:93:1e:d3:fe:b7:8a:ae:5e:4e:91:9d:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45652
sbgp-ipAddrBlock: critical
IPv4:
43.252.120.0/22
103.233.80.0/22
110.34.128.0/17
IPv6:
2401:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
02:81:32:5b:a1:6a:5a:37:ef:ac:e1:fa:4f:2c:b9:aa:2b:ac:
41:03:a3:8c:04:63:73:b0:b5:85:4f:44:76:8c:25:95:82:5c:
e8:5a:b0:e9:90:4f:f3:d5:d1:c1:78:de:25:29:88:d2:32:0d:
ea:37:98:65:d2:df:32:3f:72:b7:d8:d3:0f:13:67:3f:82:bc:
ab:0a:72:e3:7c:e4:44:dc:41:4d:cf:14:f8:34:b6:75:d6:ab:
27:44:a6:63:37:f1:5b:03:a1:24:b1:9e:5d:6f:44:b0:0d:18:
93:6b:58:65:48:8f:da:83:01:52:08:e7:b9:38:ae:63:75:28:
e9:78:47:1d:2a:c9:a5:e2:c8:49:78:90:71:9e:07:22:6e:a8:
e9:41:c1:1d:59:b2:02:83:cd:c8:64:22:df:0d:21:16:1f:77:
25:aa:19:ba:47:44:a1:74:d7:f4:a5:d4:89:1d:70:1e:00:8b:
10:92:52:28:23:b9:b5:03:c2:1c:07:93:d9:41:b8:5a:55:66:
a7:3c:38:c9:0e:e1:e3:c8:13:64:bd:ff:fb:e3:ad:58:26:2d:
4a:ba:80:c8:31:31:bc:82:19:f3:bc:46:00:17:2d:81:5f:55:
d4:39:11:36:17:2a:1b:5a:d0:1e:f6:5f:38:76:9d:5b:2e:77:
a8:d5:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:09:53 2026 by rpki-client