Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
File: VJnONj3wXJSTIjSIKXmbEO_x05I.cer (raw, json)
Hash identifier: pAQIcj3i8RkfvU71EiHLt/igRPI+pNqBJPTO+WUDvNw=
Subject key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 14:40:45 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 150004
IP: 103.190.128.0/23
IP: 2400:9060::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156100 (0x261c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 14:40:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:f0:4d:e7:55:59:38:e6:60:e8:01:a2:0b:
e7:69:27:57:8f:8c:91:ec:ce:63:a8:16:38:a3:5c:
94:52:40:b1:43:a2:93:74:38:c7:0f:5e:cc:4b:8a:
75:79:71:b7:26:36:50:66:b5:9d:ad:fa:f5:6d:e1:
93:39:6a:fe:b6:9a:38:77:55:5f:2d:98:34:ae:d1:
f5:de:eb:f1:90:1a:4d:9b:45:91:8c:fb:26:2e:fc:
5e:55:49:21:54:83:b7:3b:45:d6:d6:b6:69:dc:c6:
0a:d1:7f:f3:97:57:b6:19:3d:54:94:31:2a:6d:54:
d1:1e:2b:59:b5:d0:ac:03:90:67:95:3c:a6:80:6a:
67:c2:94:78:ad:7c:77:76:46:5c:a1:dc:a1:24:4e:
8d:a8:bb:3e:1a:ce:bf:c5:32:fc:b4:db:d9:cf:9a:
8b:ab:fd:59:4b:65:29:77:a8:14:b7:19:a2:06:12:
fd:f6:dc:ed:5b:81:75:3c:b9:48:d0:e6:d2:bb:b8:
81:85:7c:c5:5f:11:6b:f1:c1:e6:a8:2c:84:19:6d:
7d:02:35:bd:ef:00:a2:d6:3e:5c:a9:e2:3c:cb:fd:
ae:72:bf:9c:42:4b:c0:cc:3f:ba:71:23:5d:9d:db:
61:9e:4b:74:92:9a:b7:80:e5:88:a6:5d:9b:ab:23:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150004
sbgp-ipAddrBlock: critical
IPv4:
103.190.128.0/23
IPv6:
2400:9060::/32
Signature Algorithm: sha256WithRSAEncryption
40:48:c8:ce:e9:e8:e5:ae:61:57:c5:26:d0:3a:84:77:5d:2a:
4d:1d:8f:bf:21:bf:98:f5:9a:54:db:2c:75:73:2c:2b:00:fa:
90:b3:3c:2c:1f:1b:73:4d:ca:9a:cc:fe:40:7a:84:7d:e7:92:
84:57:9b:2c:70:8e:41:6e:11:85:4f:91:d8:fd:33:fd:ba:48:
55:26:8d:62:03:c4:50:fb:08:93:1b:fd:d3:16:bc:82:89:72:
9f:04:bc:bc:8c:d9:34:35:4d:c3:ae:17:db:2d:16:53:d8:54:
1e:73:28:e9:6b:f6:d9:26:26:b9:b8:1b:76:1e:bb:a5:b8:3a:
87:7b:55:3b:93:15:70:55:19:ff:e4:ea:37:82:d8:f3:35:ca:
cb:59:24:b9:eb:9f:26:39:c1:25:f9:71:ed:2e:44:01:f1:81:
72:27:e3:db:95:2d:d7:35:00:62:18:82:77:c5:18:a3:06:38:
35:03:2e:e9:3c:0d:db:96:ea:d7:e8:1d:19:d9:28:8a:8a:5a:
28:0f:2b:5f:e5:e8:45:36:b9:bc:a6:b9:4d:75:56:b2:81:c9:
ed:f8:41:c5:f1:72:10:14:2f:c7:2b:ed:0c:04:3f:54:bc:17:
70:b5:75:cc:a5:39:35:82:64:71:a9:60:b0:fe:73:c6:19:74:
36:c9:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:23 2025 by rpki-client