Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
File: VngmFidUtGDLWGbawxSIDHA1Rh0.cer (raw, json)
Hash identifier: gWHoOQd+xUpqybj+a2n2gdvl0FBEUKp+yQC2sBVy6Ik=
Subject key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5DB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 13:32:34 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152710
IP: 103.49.124.0/23
IP: 2001:df3:bc40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 09:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177627 (0x2b5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 13:32:34 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:89:eb:e6:cf:87:24:37:77:a7:4c:17:5a:
a6:e4:e4:65:a4:f7:44:52:00:f3:ad:d4:c6:e5:c1:
78:f7:28:4a:46:df:70:10:29:f9:bb:4c:86:3a:9f:
e8:fb:bd:b2:68:89:be:87:7d:64:de:99:23:54:30:
e2:3d:32:3d:e3:f4:60:24:a9:a9:d5:15:12:fd:61:
fd:e3:85:43:d4:b1:46:d3:df:12:fa:0a:b2:cd:5b:
32:e0:f5:8f:ba:74:ea:6c:d8:44:a2:c2:32:dd:96:
18:06:34:97:2a:fc:2f:51:c1:78:02:1b:a1:27:9c:
66:23:7b:44:7d:71:c9:27:b0:d7:33:45:1f:9c:35:
14:2e:bd:4b:f1:e9:52:5c:18:aa:54:13:fc:1e:aa:
9a:24:b0:dc:92:bc:ad:78:ae:d8:59:72:77:f1:40:
ad:71:61:32:16:73:5c:76:db:5f:18:44:c1:e6:9a:
f0:27:30:ae:d7:a6:76:ba:c3:f7:40:26:b1:1a:9d:
6c:35:de:b7:ca:db:26:53:08:be:02:51:6c:47:a2:
22:8d:6a:15:8f:8f:4c:9c:94:a8:85:84:30:01:e2:
61:bb:8e:aa:1f:8d:4b:97:f1:66:cd:cb:d0:f1:97:
a9:9c:3f:d6:65:f3:e3:dd:8a:24:f8:7e:29:5b:6f:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152710
sbgp-ipAddrBlock: critical
IPv4:
103.49.124.0/23
IPv6:
2001:df3:bc40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:36:f1:e4:2e:8e:5b:36:81:7d:39:6a:f4:9a:65:1a:8d:4c:
7d:d1:4c:f4:dd:18:d4:22:8d:7e:dd:c2:c9:4e:10:74:0a:b2:
ea:ca:06:ce:0b:96:0c:d9:8f:b8:9c:71:9b:08:89:2e:36:d2:
89:f0:2c:a1:6b:c5:8a:9c:f8:0b:2a:5f:d9:85:6c:93:4f:68:
a2:e1:13:01:fc:a2:7f:b0:0f:5c:6f:59:b2:3d:42:a8:90:d4:
b1:61:e0:ef:a9:c0:5d:2f:3a:a5:3c:54:16:8a:9f:2a:25:93:
dc:46:cc:6b:2e:b2:65:fd:51:e1:ac:68:83:e0:2f:17:ce:ee:
de:a1:d0:98:fe:a1:60:80:00:7e:f7:0b:32:22:82:35:b5:a5:
37:65:ef:bd:86:00:b7:95:4d:a8:63:2b:df:c5:c8:a1:45:6e:
bc:3d:6c:94:90:3b:cf:7c:3d:89:0f:2d:49:a2:a6:3e:f3:7b:
f9:91:4c:46:5d:a1:5e:a0:c4:34:8e:60:dd:62:91:9d:05:18:
56:4e:ac:06:6f:f0:fc:cf:9c:68:ca:d9:2d:49:61:00:c5:c7:
02:36:68:ab:ae:7c:ec:6b:8b:93:b8:84:3f:ba:29:f2:d9:b0:
d6:a5:6d:7f:c5:fe:b2:b8:dd:30:16:38:5b:a3:e1:5b:a2:04:
d4:38:93:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:13:50 2026 by rpki-client