Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer (raw, json)
Hash identifier: iAMfMyFioxS8iBNHZK+lTntKCBl7H4qysprHQW8bVM4=
Subject key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02698E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Oct 2025 06:02:16 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.119.204.0/22
IP: 103.5.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158094 (0x2698e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 06:02:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:b2:03:bd:da:e0:bf:91:8f:6c:01:18:b1:
f8:26:25:09:b7:ac:fe:66:2c:72:a5:b0:99:6c:0a:
a0:33:c0:04:d4:af:dc:d8:40:0a:41:db:60:ee:d7:
8d:82:94:df:8a:69:df:76:e3:69:07:70:5a:19:6a:
a6:8d:0d:02:6b:e6:c9:2d:00:16:a1:cd:a6:3c:a6:
df:b1:ae:ea:cb:9c:3a:b1:91:cd:b9:56:76:a8:d4:
84:aa:f8:cf:e7:1f:89:ce:98:d8:3a:c9:61:08:11:
b0:02:2b:e1:22:ee:d0:5f:f9:ae:08:2c:e3:83:8e:
e0:d0:64:6b:8a:64:20:1a:bf:1a:c5:aa:e1:02:0c:
9d:7e:7f:58:d4:96:92:d4:71:3e:02:02:c4:70:42:
62:2a:ff:3b:e7:2c:78:fa:3f:7d:cf:43:e0:46:ec:
cc:e3:f3:23:bc:3d:ae:5d:ce:ae:67:60:23:fc:13:
2d:4a:e7:2d:76:6e:e0:4c:7d:4e:7f:e7:ab:3a:30:
65:05:fc:e2:12:26:9c:22:4d:94:33:bf:3d:18:d0:
3e:b9:ba:1d:17:f5:57:d7:45:c2:4c:9e:01:a9:cd:
c9:33:50:13:53:c4:20:e6:d8:4d:a1:45:6a:5f:9e:
b1:dd:0f:da:68:52:8b:36:3b:31:65:ef:8d:eb:a1:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.204.0/22
103.5.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:34:bf:e9:9f:e6:89:34:1d:6f:cf:20:0f:1d:92:3f:21:1b:
d8:a8:4c:59:20:15:bd:21:81:e5:b7:ef:a9:c9:07:bf:77:b3:
b6:7a:ae:7b:29:d1:67:4a:61:64:18:39:c5:6b:7a:47:da:e1:
d5:66:e9:19:46:50:48:c4:c9:9f:0e:6b:c0:e8:21:7f:3e:54:
9f:a4:3f:f0:5a:4f:4a:74:5b:72:be:1d:bd:88:91:1d:fe:6b:
bd:fe:47:bf:03:f7:73:96:1e:2e:8a:cd:f7:b7:56:4d:bc:15:
20:6d:3f:62:37:81:83:f6:8e:10:7c:58:51:41:03:ed:08:50:
29:00:8e:df:28:71:f1:13:f5:32:6f:85:ab:1f:e9:d7:cf:ee:
90:04:16:90:87:a5:f9:5c:71:e4:54:2f:1b:d2:0d:fc:ba:ed:
20:eb:88:69:b4:8e:2b:41:c2:4e:2e:dc:96:c6:95:e5:28:1c:
4a:af:cf:77:95:e3:13:52:3f:2a:96:e3:9a:fd:b2:7e:86:5d:
0b:b5:84:73:0e:6e:64:6f:55:81:1e:c7:b6:2e:b8:7a:00:37:
14:e3:ca:2c:db:1e:48:cb:b2:e4:07:3b:26:98:a0:8a:20:02:
b7:4f:23:64:c3:b3:6c:25:a3:7c:dc:ba:73:ca:a0:ea:30:ed:
50:b4:0d:59
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAmmOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAwMjA2MDIxNloXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZE
Q0QzNzJBN0RDQzVGMDI5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5dbIDvdrgv5GPbAEYsfgmJQm3rP5mLHKlsJlsCqAzwATUr9zYQApB22Du142C
lN+Kad9242kHcFoZaqaNDQJr5sktABahzaY8pt+xrurLnDqxkc25Vnao1ISq+M/n
H4nOmNg6yWEIEbACK+Ei7tBf+a4ILOODjuDQZGuKZCAavxrFquECDJ1+f1jUlpLU
cT4CAsRwQmIq/zvnLHj6P33PQ+BG7Mzj8yO8Pa5dzq5nYCP8Ey1K5y12buBMfU5/
56s6MGUF/OISJpwiTZQzvz0Y0D65uh0X9VfXRcJMngGpzckzUBNTxCDm2E2hRWpf
nrHdD9poUos2OzFl743roTzvAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUvWCWY+OW
MuLnt0/c03Kn3MXwKaYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwM0MzLzk4RDg1MDA2QkNFNDExRUFCOEQ2RDM2MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1P
V011TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAItd8wDBAJnBaAwDQYJKoZIhvcNAQELBQADggEBAMc0v+mf5ok0
HW/PIA8dkj8hG9ioTFkgFb0hgeW376nJB793s7Z6rnsp0WdKYWQYOcVrekfa4dVm
6RlGUEjEyZ8Oa8DoIX8+VJ+kP/BaT0p0W3K+Hb2IkR3+a73+R78D93OWHi6Kzfe3
Vk28FSBtP2I3gYP2jhB8WFFBA+0IUCkAjt8ocfET9TJvhasf6dfP7pAEFpCHpflc
ceRULxvSDfy67SDriGm0jitBwk4u3JbGleUoHEqvz3eV4xNSPyqW45r9sn6GXQu1
hHMObmRvVYEex7YuuHoANxTjyizbHkjLsuQHOyaYoIogArdPI2TDs2wlo3zcunPK
oOow7VC0DVk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:28 2025 by rpki-client