Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer (raw, json)
Hash identifier: 4fblbTSs2KwQvz22qqepmwF/DFGjRMZIZmlCmQquqgE=
Subject key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 12:23:02 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 133605
IP: 2401:2cc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175728 (0x2ae70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 12:23:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:81:72:b4:30:bf:8d:0e:c5:a6:8b:1a:43:9f:
a5:34:bb:c7:c2:5b:1a:d9:10:b2:93:32:4c:64:bd:
6a:8f:23:54:30:55:37:23:dd:f7:77:01:51:54:db:
db:2b:4b:6b:e6:7f:26:ba:3f:1b:c3:9d:d6:ac:85:
81:ff:5c:b6:b2:6b:3c:90:57:ed:eb:85:aa:47:e0:
d4:98:58:43:7e:bc:95:cd:9c:ed:77:c1:e9:1a:5e:
2a:2b:da:03:6c:39:97:6b:0c:57:25:22:01:61:68:
f1:93:d0:f2:6f:a6:f7:c0:2d:d8:63:f1:75:87:d4:
ef:43:ff:c8:00:04:34:ac:c4:1f:d7:a6:4e:6b:73:
ee:7a:32:b4:f0:3e:02:ef:29:fe:69:c9:09:77:8b:
f1:47:74:d0:04:a9:eb:26:72:92:10:f7:c1:e4:c0:
cf:b1:00:d9:d0:71:66:3a:5b:cb:2e:0d:aa:b0:3f:
5e:29:c6:ca:56:e4:dd:52:e2:55:a8:39:ca:48:e0:
51:fe:a1:2f:f8:f5:54:0f:4b:e7:be:84:bb:c3:f6:
a1:c9:59:ba:ba:57:3f:3f:63:eb:1d:00:2b:e8:04:
60:37:22:08:89:56:e6:b5:3e:fe:f6:0e:9a:fa:67:
6e:c7:12:ba:25:e1:6a:b7:cc:08:2b:ae:bd:34:03:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133605
sbgp-ipAddrBlock: critical
IPv6:
2401:2cc0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:85:3e:d5:a1:ce:ed:b9:64:51:17:56:35:5e:78:09:6c:3c:
df:49:26:75:00:f8:06:bc:2b:f5:58:7c:87:31:c7:0a:b4:1f:
3f:4e:b8:54:38:4d:79:83:1a:a8:a6:d6:45:f5:79:c3:5f:e7:
79:52:60:33:96:e2:70:0a:ed:ba:f5:ec:88:18:6a:3f:64:15:
e3:36:f0:29:77:85:be:77:27:fb:3c:3b:40:17:9d:58:1b:60:
cf:92:ca:e3:db:b0:43:99:fc:29:3c:99:62:5e:60:0e:49:e6:
32:b6:bf:4e:1d:6a:bc:76:49:9b:bc:e3:42:58:af:e4:23:36:
b0:ee:e6:1e:d4:b2:fa:b2:0c:e8:8c:42:9a:f8:3a:97:8c:61:
97:bd:86:6f:2a:04:ac:6b:3c:85:42:55:52:ff:c5:6d:9a:26:
c0:e5:0e:e0:70:c4:96:53:ca:23:a5:62:97:c1:4f:ac:bd:89:
8e:cb:20:9c:5d:cf:da:76:64:e9:84:1a:97:88:25:1d:55:ba:
a0:8d:60:9e:0d:f7:a5:18:6e:c8:e6:c0:b4:f6:28:e1:0a:78:
fe:80:07:38:e6:a8:a6:82:56:e0:29:c9:db:2b:a2:a2:0e:2c:
1c:56:a5:93:20:e9:0d:23:5e:08:df:b0:ce:20:58:b4:cf:85:
ef:76:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:41 2026 by rpki-client