Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
File: VSG7pLlnmYQnwoK61rZvfm22twc.cer (raw, json)
Hash identifier: XbSXm3/NSJ3zVIcJpTnOksFJITPhIsgFlmc/lwDAm7s=
Subject key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C525
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jul 2026 06:25:58 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 140875
IP: 2001:df7:3440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 00:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181541 (0x2c525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 06:25:58 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:42:d1:c2:08:08:07:6a:38:d4:af:58:eb:
6a:3f:ba:e5:f5:12:25:b3:5c:75:cc:02:07:94:60:
d4:55:e2:a4:3c:3f:a2:65:f3:66:ed:31:22:a2:4c:
75:25:19:f7:c3:c5:5f:8b:99:94:77:eb:74:7f:47:
5d:18:e6:8c:e1:9d:77:ee:e9:8f:02:bb:a8:2b:cf:
68:54:41:e3:d6:20:c4:90:df:61:e4:65:69:6b:45:
0e:f3:ec:82:17:80:c2:f6:cf:11:07:f6:a2:9e:d9:
94:87:75:f6:a8:b6:69:00:48:1b:d5:99:90:6c:fa:
b6:f1:86:6f:56:59:a8:43:c7:f4:f7:6e:70:28:d5:
0c:50:e1:51:29:65:20:be:ca:42:1c:57:fd:db:fa:
8b:95:b8:54:76:a8:01:f0:b6:40:00:62:d6:1b:6c:
e3:46:77:48:dd:2d:8c:fc:d3:1d:6e:9c:71:ff:65:
e4:1d:30:3c:26:01:69:93:fb:dd:1f:1b:2a:40:2d:
44:45:e6:76:36:d7:37:f6:58:2e:21:a3:1f:71:cc:
ed:9d:c4:ca:f2:90:ae:d9:aa:62:8f:ae:95:bd:50:
16:15:2c:5d:1b:b4:30:6b:d9:3a:a3:c0:6c:35:bb:
ef:8b:37:62:0f:a1:ab:81:13:0f:0e:fb:59:69:c9:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140875
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3440::/48
Signature Algorithm: sha256WithRSAEncryption
c6:9d:b0:fd:a1:0b:c5:94:a4:ee:67:73:42:c5:80:d8:6a:b3:
1b:c2:50:62:81:73:ae:2b:ca:93:4c:fd:3e:a8:33:59:44:9b:
2d:f5:5b:b0:a0:9b:06:76:9d:d7:6c:ef:b7:20:7e:29:53:54:
fa:98:2b:5b:83:d2:b8:71:57:8a:4e:c8:4f:6a:f3:05:23:21:
9f:1e:2d:7e:44:7e:2a:d5:92:66:a8:b1:db:4c:e9:5f:3d:b1:
f1:94:28:a0:33:82:b5:fb:59:bc:1c:31:6c:86:2b:f6:3c:77:
2f:92:b7:a1:3f:a9:be:57:4f:39:d5:39:d4:09:c6:4b:25:58:
50:ef:ec:33:fb:8a:46:ca:ab:86:d3:d7:af:e2:5a:aa:c9:31:
e1:5d:ae:25:f1:48:e4:dc:da:e3:1c:49:92:cb:f6:0a:42:7c:
c7:b0:4a:b8:98:91:b0:b9:a6:66:09:d3:fd:bf:bf:49:66:8b:
ab:3a:03:19:f2:07:cf:77:3c:36:e6:43:f9:9b:03:fe:0d:43:
ca:6f:7a:d1:51:21:40:7e:a9:19:47:fb:55:d3:ef:d3:9c:63:
4b:41:f8:27:00:b6:cc:f2:7f:c3:00:d9:d6:6a:8c:38:e0:3f:
0d:f0:ad:e7:53:67:c4:9c:e7:bf:c1:7b:53:06:a2:fa:b6:35:
4e:9a:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:55 2026 by rpki-client