Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
File: vEIYikinqZ-W1q-yAR59yd7uIqU.cer (raw, json)
Hash identifier: ewz+pwvNB8KAM44i3DjEJt1PAVNNObU9aMrmJ/dO2Rc=
Subject key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4DCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Oct 2025 20:55:31 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 79.109.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19918 (0x4dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 10 20:55:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:cd:0a:64:af:01:40:da:2f:ab:5c:3a:a9:
88:85:64:50:53:a0:52:33:24:8e:b3:ae:39:32:74:
81:dc:c6:6d:01:60:e0:4b:3b:57:30:ca:5c:36:16:
80:6a:ad:28:39:ec:b6:f7:87:29:34:4b:3b:e7:6c:
8a:2c:cc:4d:e5:44:ec:98:fc:8e:c9:f9:3f:64:5e:
c3:82:cf:60:a2:ba:6c:65:2b:a1:96:9e:40:4e:a4:
33:fe:b6:12:d0:16:4b:b1:78:a0:f9:fd:05:75:15:
a1:2c:36:fa:23:ec:a1:61:af:fb:89:9d:09:8d:94:
86:17:cd:21:4f:5f:da:57:3f:92:a2:0b:55:be:1f:
12:2f:93:ad:08:72:e7:68:d9:03:79:a5:7f:35:a8:
00:07:a7:56:92:e3:1e:67:86:0c:c9:b5:3a:0b:1c:
36:78:32:52:eb:e3:3d:a6:fb:78:ed:54:66:f2:2e:
74:05:a3:7a:2f:0d:af:f6:f3:93:ab:27:be:7f:e1:
06:e6:9c:e7:97:bf:a2:68:b4:3a:f5:27:40:e6:6d:
09:0e:15:07:55:47:8f:fa:45:df:6d:d0:7b:69:5e:
bf:da:d9:a6:44:50:39:a1:db:d2:a2:f4:1b:58:e1:
9b:9d:09:0e:40:61:9a:90:29:d7:4a:a4:5e:dd:23:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:29:58:a0:b7:e2:ad:6d:20:d9:97:94:8a:bc:81:e9:f2:82:
1f:9c:12:92:2a:7b:7f:f5:44:e5:d2:37:ce:45:fc:e6:f1:24:
b7:6e:4f:0c:9f:58:8d:05:a8:f3:14:b8:6d:fb:4e:c0:40:aa:
8c:05:a1:b6:55:f2:91:be:8f:d1:a8:5a:45:df:92:ab:d4:d7:
ef:dc:b7:48:a0:05:2c:b6:aa:64:db:57:f1:61:42:3d:b3:9e:
df:fa:26:68:0b:91:71:32:1b:d6:48:95:21:6d:ed:f9:d4:a7:
29:e6:ea:5e:86:93:ca:f7:62:68:06:fd:36:c4:e9:d9:c9:83:
c7:77:d3:c3:65:fa:f1:14:b3:82:3d:c4:5b:8f:11:b9:13:0e:
d9:7c:1b:f4:e3:e3:36:31:8f:fb:20:8d:73:59:72:4b:6c:89:
c5:e3:83:bb:db:4d:36:3f:a6:e9:17:a9:4c:2d:15:3a:6e:f3:
0d:11:37:0d:bf:51:00:3e:20:60:13:84:06:9f:a0:2a:9b:41:
11:e4:2f:67:e3:27:77:07:7d:d0:79:28:e1:7b:39:d8:bd:21:
2d:81:8a:c6:7f:b4:3a:30:42:56:20:c1:f3:4b:46:24:56:4d:
98:8d:6f:4a:d1:7a:e4:8d:d1:fb:05:93:29:a3:75:10:95:47:
64:90:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:09:22 2025 by rpki-client