Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (raw, json)
Hash identifier: FP5eOV5bytdmVisbV26KZukFB13ony3XlsUrJT8Cl+Q=
Subject key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BA1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Sep 2025 15:38:08 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 69.94.32.0/20
IP: 69.94.80.0/20
IP: 209.212.192.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 19:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27553 (0x6ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 30 15:38:08 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.94.32.0/20
69.94.80.0/20
209.212.192.0/19
Signature Algorithm: sha256WithRSAEncryption
30:09:b6:c1:66:f9:1a:be:06:4c:f2:06:56:e7:e8:f2:79:c8:
c7:c8:53:69:1b:ce:58:c7:38:d6:eb:14:77:44:95:f3:39:6a:
ba:f8:21:15:35:f5:59:37:7d:40:3f:dd:c4:4c:27:cb:44:52:
94:4d:ac:ee:96:1d:c3:f5:5f:ba:27:e8:5e:69:c3:53:eb:e1:
b7:2b:a9:1f:b0:b5:31:4f:8b:60:28:05:f3:68:5a:74:7f:2f:
bf:6b:c1:6d:d7:94:96:9f:e7:d6:88:0d:e0:91:96:65:af:52:
39:15:0a:a2:8a:70:62:c8:5f:5f:38:41:37:d6:8d:f3:b0:e4:
fe:59:3b:15:a1:ac:09:47:d9:b8:7c:40:dd:fe:33:d8:83:69:
df:47:90:3c:58:d5:7a:a1:9d:3e:6d:12:fb:33:9c:8d:f4:5b:
f0:c6:1a:88:e7:96:fc:e3:41:4b:8e:f2:5f:6c:8e:b9:c9:11:
70:ae:05:4a:8b:ec:8e:bd:5b:ee:91:c5:ba:85:a8:26:ed:b0:
07:66:cb:00:2f:b7:b6:08:f4:94:7c:af:66:07:d0:ba:e8:20:
48:dc:0b:6a:87:c6:41:31:e3:d5:b3:a8:ad:49:41:2f:eb:1c:
0b:de:20:6e:e3:8a:e6:dd:8c:9f:26:b2:a6:ea:79:a2:fd:6c:
dd:40:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:46:40 2025 by rpki-client