Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer (raw, json)
Hash identifier: mdwXXYtRg5kQ84fODnuh6pu+u/VzCrVRVJasKUFblKc=
Subject key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024FDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 01:53:13 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 55885
IP: 49.156.48.0/22
IP: 2402:1220::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151514 (0x24fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 24 01:53:13 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:a7:64:d2:f7:01:30:41:ad:e7:5e:bb:36:
d5:f5:2d:17:ea:71:6d:73:eb:99:38:ca:16:e5:8a:
fc:12:80:e5:36:87:a1:2c:44:ca:d3:4d:cc:50:0e:
88:c4:0e:cc:3e:45:a2:0f:d0:7b:9e:ab:5b:2b:c7:
a3:dd:07:1c:a6:9d:8f:8f:d8:d8:e1:fa:1f:2f:c7:
2c:89:bf:0a:04:27:3d:b4:c3:a2:8a:e1:ff:66:6b:
14:31:0c:52:db:a9:8e:88:5d:ff:66:f8:6e:9c:63:
6a:69:d4:5d:57:4b:78:58:c6:49:8c:c0:07:40:2b:
c7:8c:7d:f0:d4:5a:fe:6f:43:a6:57:8a:33:32:a7:
d2:2a:8b:dd:d4:e6:cc:57:5d:0c:14:c0:07:87:cb:
4d:e2:20:f8:c0:24:66:d7:7b:98:01:f1:d1:1e:d9:
0b:e0:d1:c2:59:27:26:ae:59:51:f8:78:a3:dd:1e:
77:85:eb:8f:f2:68:33:9f:5d:c7:db:06:88:58:ec:
80:d0:2b:bf:0a:07:1a:7e:49:4f:63:e5:62:45:33:
64:c8:27:c4:26:6a:9f:db:3e:a0:53:0c:c1:98:dc:
1b:e9:93:51:bf:0b:c7:32:5f:0b:c4:97:dd:f0:9b:
5e:e2:67:bb:2f:43:51:bf:68:c9:a8:d2:75:3a:26:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55885
sbgp-ipAddrBlock: critical
IPv4:
49.156.48.0/22
IPv6:
2402:1220::/32
Signature Algorithm: sha256WithRSAEncryption
8e:50:9c:52:fc:c6:e4:6d:1b:b5:ea:5a:92:b5:8c:ec:81:bc:
ef:13:61:df:83:34:20:12:9f:82:8b:05:b2:9f:4c:1e:64:0c:
79:02:65:dc:86:08:f1:53:67:cb:e9:87:ba:ee:1e:d5:ae:f1:
07:4c:69:8d:1c:e1:01:3b:48:29:87:73:f5:8a:03:23:a3:80:
58:ab:67:19:8a:70:b1:96:63:a6:68:0a:ee:d9:1b:41:80:d2:
c0:78:85:29:cf:09:ae:56:26:e4:f2:30:9a:11:89:ba:46:5b:
fd:83:35:83:9b:54:d9:49:7c:2b:7f:2a:24:80:f1:fb:4d:94:
06:78:0c:bf:44:b7:02:8b:51:23:59:97:e0:cf:4a:46:ff:92:
38:b4:b9:54:c2:dd:f0:ae:e6:70:1f:5e:6b:bb:d8:89:ce:21:
6f:ee:a0:62:94:22:aa:b4:01:83:f8:8f:87:86:5f:46:73:9b:
1e:62:5e:e3:96:6a:0e:65:e7:b8:5a:ac:a7:20:47:b2:a9:14:
b5:13:b9:45:98:c0:7a:77:ac:28:5e:ec:71:71:5c:27:02:e3:
16:98:2a:00:4c:2f:d2:5f:dd:7f:d2:d0:7b:8c:f0:1a:42:7d:
d5:f6:df:0a:c9:68:6f:c3:13:36:f9:63:0f:3d:9c:3d:a2:7c:
eb:2d:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:12:33 2025 by rpki-client