Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer (raw, json)
Hash identifier: lu8tA5TYDldCkCni6c2qzA7a0//gnVdCpqDI6v/09x4=
Subject key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02664E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Sep 2025 04:23:02 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 151834
IP: 103.217.70.0/23
IP: 2401:40e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157262 (0x2664e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 19 04:23:02 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:9d:02:b9:64:d2:27:36:29:45:27:92:74:
2b:35:a3:29:db:53:a8:b0:ac:ed:9d:1a:3c:6d:53:
17:67:c7:d9:40:ab:ae:b2:e9:25:25:9e:ae:2f:1a:
da:2e:b1:60:8f:0c:33:f9:21:0d:14:89:3e:6b:4a:
b3:5d:b9:93:ac:a9:20:87:07:df:60:f8:d2:ae:25:
be:28:e1:10:5a:0d:6a:f2:58:1d:10:b2:aa:a0:c9:
c2:28:be:33:ec:a7:f4:81:86:47:ba:a4:19:86:fd:
ce:69:b5:b8:cf:27:63:17:85:b4:55:db:84:7a:4e:
7a:96:53:bc:34:07:89:0b:ec:a4:dd:55:9b:cf:9f:
04:e5:c8:11:1b:a7:69:58:9e:e8:f3:29:69:d4:65:
47:5e:fc:23:e0:bd:9a:a5:fb:c2:f6:3e:32:ff:04:
71:78:7c:98:d2:a8:d4:3a:f7:26:cc:01:7a:f4:ff:
91:22:91:64:c4:85:55:3a:38:39:a0:29:1c:92:de:
3a:33:a5:5b:34:90:4c:39:5b:03:c0:16:56:d3:f0:
69:af:d8:8c:3f:07:b1:0d:c6:7f:c4:11:9c:d0:46:
40:d4:7a:c3:10:fd:0e:d7:fe:75:c5:cd:52:55:9d:
d0:5b:46:b5:84:82:90:a2:47:f2:78:14:19:f9:7b:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151834
sbgp-ipAddrBlock: critical
IPv4:
103.217.70.0/23
IPv6:
2401:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
01:ca:72:e5:b7:42:44:3b:d5:cc:d4:f2:df:bc:a0:b5:c6:34:
4a:10:a3:42:6a:b5:2a:02:ec:f7:33:7d:c0:56:51:78:9f:3b:
a3:9c:81:73:ca:96:1d:c8:ad:f3:8c:2f:23:d8:96:8c:71:0e:
2e:d7:ee:e8:d5:61:88:a3:0f:0d:f2:9d:d8:c0:26:4b:33:52:
33:0f:a2:3c:74:2d:a9:4c:2f:2c:c8:00:32:e4:8e:c7:de:4a:
16:b9:8f:82:cc:22:ce:0a:be:63:08:3f:b6:8f:46:a9:96:be:
69:69:47:46:69:56:ac:b1:c0:4a:f7:46:b9:1a:e5:35:cf:db:
d6:0f:bd:93:20:ea:e8:40:20:0f:48:84:8c:07:25:02:cf:53:
a6:7b:d4:83:5b:5a:92:3c:c6:70:60:20:74:8b:43:ca:18:50:
05:f0:9a:d9:b9:96:b6:e5:a8:bc:16:83:e0:44:7a:89:3a:dc:
67:54:9a:89:63:91:ed:ed:41:9b:5d:18:23:c3:1d:57:01:25:
e7:1f:6f:e3:2e:66:cb:3d:74:d7:68:56:98:3e:84:6c:a0:2d:
d1:93:9d:ff:61:d4:94:9f:63:7b:ad:98:58:80:20:dc:95:1d:
82:ae:76:63:c5:f9:ef:64:4b:06:c1:1d:81:9d:ea:bc:85:a4:
85:a1:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:16 2025 by rpki-client