Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vr-uMCwjDc9Cteqa4G_5xYUdi2M.cer
File: vr-uMCwjDc9Cteqa4G_5xYUdi2M.cer (raw, json)
Hash identifier: h19iPPuzT0U3MgTAXNvXXB5448vL1d7DMNdz0ygkuZ4=
Subject key identifier: BE:BF:AE:30:2C:23:0D:CF:42:B5:EA:9A:E0:6F:F9:C5:85:1D:8B:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A371
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/vr-uMCwjDc9Cteqa4G_5xYUdi2M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Mar 2026 02:43:12 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 24120
IP: 202.44.76.0/22
IP: 2405:ea00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172913 (0x2a371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 10 02:43:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AC075, serialNumber=BEBFAE302C230DCF42B5EA9AE06FF9C5851D8B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:d2:5e:3e:77:1d:33:2e:7e:5d:e0:f4:d5:
eb:41:ad:9c:9f:8c:89:53:27:fb:86:18:13:e7:f3:
a8:2b:ed:57:38:34:4f:7e:6a:a9:04:0f:eb:3e:71:
60:8f:bc:94:83:1a:d0:a4:c9:ad:53:bd:fd:bc:06:
fc:8f:d0:e9:f9:cb:05:09:87:e9:15:fb:4d:c8:1e:
88:0e:05:29:31:d3:29:dc:9f:a4:be:eb:40:31:2c:
fb:8d:17:c5:8e:1c:57:f0:7a:08:10:7a:95:d8:38:
6d:8d:89:30:c9:b6:03:38:93:46:00:82:f1:10:03:
e1:89:46:2e:e2:77:07:46:08:a2:64:88:ee:b2:34:
db:90:05:3e:12:69:3a:4f:3d:86:3a:4f:b2:b2:74:
3b:a4:2b:89:c1:6a:b8:75:50:6d:44:8f:82:0e:6a:
a6:12:b2:5c:ce:00:5c:3f:d1:04:25:54:89:2c:b2:
3f:68:30:1e:28:18:0b:3c:ca:72:5b:e0:9b:d9:98:
32:9c:ce:94:af:99:4d:63:73:69:ca:d6:82:15:11:
23:c1:88:e9:45:66:30:97:06:dc:0b:13:44:cb:f2:
9f:b0:90:e9:e6:3d:fb:46:1c:77:a3:6c:b6:15:15:
33:15:f5:99:06:ad:41:6b:f3:36:c6:35:3a:74:f2:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:AE:30:2C:23:0D:CF:42:B5:EA:9A:E0:6F:F9:C5:85:1D:8B:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/vr-uMCwjDc9Cteqa4G_5xYUdi2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24120
sbgp-ipAddrBlock: critical
IPv4:
202.44.76.0/22
IPv6:
2405:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:ab:da:05:0f:f0:8f:42:92:39:85:eb:c8:ff:18:bb:0e:17:
02:30:d0:87:68:0f:25:0a:5b:b4:d7:57:d0:81:53:2e:d4:89:
e2:d0:32:4a:e2:3b:6f:09:cd:05:da:77:75:eb:ff:23:e7:1b:
92:37:9c:f9:96:07:45:ba:bb:f4:d1:8b:1e:6f:fb:c9:e0:5c:
2b:ed:c3:22:80:52:c1:e2:a3:f0:59:6e:8e:e0:a9:a5:ef:e9:
fa:6b:fe:7e:15:d4:bb:46:7c:6a:0b:44:6e:24:12:d4:59:da:
5d:d1:10:7e:f5:f6:16:fa:64:47:22:76:96:eb:59:20:a7:db:
ff:69:f4:a9:55:37:77:2a:9d:56:21:44:1e:c3:7e:46:09:1a:
41:75:0e:ce:8e:e3:88:97:d6:79:0c:2d:37:79:09:04:db:92:
97:eb:f7:73:ec:92:53:87:c7:e6:13:23:f1:c2:ae:4c:8a:64:
09:ac:3f:a0:18:c4:20:bb:b5:7d:9f:b1:38:2c:7a:76:a4:58:
a7:c0:d5:20:a4:d1:e5:24:6e:b7:5f:9f:6c:72:b5:db:24:23:
fd:cc:ed:d7:d3:30:4c:d1:c8:ac:2a:67:22:7d:65:7a:c5:61:
22:72:fd:4b:62:6b:d0:b0:dc:7b:d4:e8:80:c8:02:47:b3:ea:
c2:7f:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:00 2026 by rpki-client