Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer (raw, json)
Hash identifier: b3P6MtmwhA/4oL48Tnfb9nZrBryiA16Rm+g5YeLBDpM=
Subject key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D7DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Sep 2026 02:34:31 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 151834
IP: 103.217.70.0/23
IP: 2401:40e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186335 (0x2d7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 02:34:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:9d:02:b9:64:d2:27:36:29:45:27:92:74:
2b:35:a3:29:db:53:a8:b0:ac:ed:9d:1a:3c:6d:53:
17:67:c7:d9:40:ab:ae:b2:e9:25:25:9e:ae:2f:1a:
da:2e:b1:60:8f:0c:33:f9:21:0d:14:89:3e:6b:4a:
b3:5d:b9:93:ac:a9:20:87:07:df:60:f8:d2:ae:25:
be:28:e1:10:5a:0d:6a:f2:58:1d:10:b2:aa:a0:c9:
c2:28:be:33:ec:a7:f4:81:86:47:ba:a4:19:86:fd:
ce:69:b5:b8:cf:27:63:17:85:b4:55:db:84:7a:4e:
7a:96:53:bc:34:07:89:0b:ec:a4:dd:55:9b:cf:9f:
04:e5:c8:11:1b:a7:69:58:9e:e8:f3:29:69:d4:65:
47:5e:fc:23:e0:bd:9a:a5:fb:c2:f6:3e:32:ff:04:
71:78:7c:98:d2:a8:d4:3a:f7:26:cc:01:7a:f4:ff:
91:22:91:64:c4:85:55:3a:38:39:a0:29:1c:92:de:
3a:33:a5:5b:34:90:4c:39:5b:03:c0:16:56:d3:f0:
69:af:d8:8c:3f:07:b1:0d:c6:7f:c4:11:9c:d0:46:
40:d4:7a:c3:10:fd:0e:d7:fe:75:c5:cd:52:55:9d:
d0:5b:46:b5:84:82:90:a2:47:f2:78:14:19:f9:7b:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151834
sbgp-ipAddrBlock: critical
IPv4:
103.217.70.0/23
IPv6:
2401:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
65:df:e5:f5:5a:b9:57:4a:a4:8a:a0:d1:95:0c:70:d0:7d:38:
f8:90:37:75:63:9c:ba:79:7b:36:d0:f1:fe:f2:60:0f:f0:88:
dc:04:6b:4f:04:89:15:32:66:b7:e3:e5:c0:d9:ac:37:d9:69:
40:22:f5:3a:d6:66:81:7c:cb:26:34:ec:71:d3:20:14:a8:c1:
fc:84:c7:59:db:43:d1:84:58:dc:db:2e:cf:3f:7b:49:6b:24:
4d:55:28:e4:34:76:57:78:23:fc:b0:0b:a2:56:28:cd:3d:1f:
1a:f0:17:2d:7e:64:fb:c8:12:35:54:6d:4b:fe:c8:d7:f1:c9:
e8:a7:df:58:9b:ab:26:56:b6:68:dc:ef:ca:eb:3e:e6:f9:93:
b7:81:a1:22:ea:52:88:da:cf:03:04:d8:bf:12:5f:b9:99:35:
a5:08:e3:14:2e:d0:fd:41:24:1f:0f:80:48:c3:aa:0e:41:8e:
fe:56:e3:43:25:3b:07:53:12:6e:0a:fa:38:2c:1b:0d:7e:36:
f6:42:bd:c4:0e:d6:c4:5a:bc:36:30:e4:d9:9a:03:cb:a9:40:
03:2d:c5:ba:05:ae:94:ab:37:47:4a:d1:6a:07:3e:64:a1:b2:
ca:86:05:7c:59:d9:a8:ee:d7:dd:28:c6:1d:db:c3:07:b1:09:
46:e9:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:37 2026 by rpki-client