
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
File: vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer (raw, json)
Hash identifier: FaJO/B7n0jSNC5DF0l94P8Y2M0e/o0HutP77pVn95X8=
Subject key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 07:32:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142256
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172501 (0x2a1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 07:32:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:71:48:a1:da:63:db:7e:c0:20:e9:9f:7f:
e1:1a:6f:a5:9f:71:62:0f:b9:6a:19:3e:28:21:e9:
69:f1:08:c8:ce:78:37:58:61:6a:0e:99:28:28:bd:
39:a0:1d:97:cf:f7:9a:49:b6:37:c9:8e:94:d8:68:
73:9c:f4:8e:2f:e3:4e:8b:d0:24:98:58:45:41:0e:
c9:21:ee:c0:c0:76:16:ce:4d:67:3c:e5:4b:58:bc:
5c:ce:69:a9:d9:ae:bf:76:f7:4b:f0:69:63:e8:eb:
31:c2:73:e0:07:61:b1:ef:82:86:ae:0f:c6:3d:7d:
51:4c:1b:9e:1a:7d:53:b9:2a:41:b6:30:64:bc:a5:
c7:e6:d4:69:6c:17:17:6e:67:db:1d:26:4e:dc:ec:
6e:9a:91:ec:c7:9a:00:94:61:7f:cb:dd:87:a2:45:
c6:e3:1a:fa:c9:80:19:01:e7:af:94:b5:cf:cf:02:
f2:3d:a9:a2:47:08:8f:b2:e1:a9:59:0a:22:64:70:
2e:f6:17:13:35:52:48:ca:01:e4:95:85:d6:51:a1:
b2:d4:5d:dc:ed:9c:2d:f5:3b:cc:6c:5e:d6:70:85:
7b:9f:d7:b2:32:9b:1b:17:34:ee:10:eb:47:18:d3:
9f:71:b6:b7:53:ed:bf:f4:c9:55:e5:f4:ab:61:34:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142256
Signature Algorithm: sha256WithRSAEncryption
c3:fe:e9:ce:3e:62:df:c8:34:02:35:e5:e8:e8:d0:1d:b9:be:
bf:2e:81:15:e7:dc:30:fd:0e:81:db:20:12:87:53:a1:00:df:
b1:2c:c6:bc:a6:34:ac:a3:ff:69:e8:5e:37:c0:de:a3:9a:ad:
88:15:13:10:78:b5:f8:4f:db:dd:68:75:c4:96:f1:0f:56:85:
c6:cd:0c:38:70:4a:da:83:fd:5d:8d:30:e6:7c:f0:6a:38:c1:
20:9a:f8:b8:92:40:e2:34:df:9d:ab:27:cb:83:6e:f0:75:72:
2d:6d:80:5d:75:f0:0f:15:0a:5c:6f:cc:e2:0e:00:de:44:f8:
54:16:0a:18:82:b0:7e:d4:97:0c:e1:9f:9b:58:71:7c:08:2e:
63:a4:11:ee:a5:1e:97:eb:f8:f6:a6:8b:be:65:02:80:98:cb:
75:5a:7b:25:9f:64:88:f2:e7:f3:72:63:ea:97:b4:ef:58:1a:
50:cb:8f:b8:bb:2b:c4:39:25:61:6f:ed:23:4b:79:7d:11:9f:
92:1f:2f:a9:b9:e5:5c:14:19:75:58:e5:02:63:54:f6:49:f9:
00:ef:67:39:85:69:90:d4:ef:b1:4b:ca:d4:7c:be:8f:3c:90:
f0:34:57:62:7b:ff:91:98:25:a2:aa:3a:a9:f3:be:e2:3b:6a:
0d:5f:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:18 2026 by rpki-client