Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer (raw, json)
Hash identifier: ncVQDxI32Yvzm5T4XrPZelneyd+7ePf7RGiF9uJd1Sw=
Subject key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DAAD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 14:04:02 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 45.119.204.0/22
IP: 103.5.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187053 (0x2daad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 14:04:02 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:b2:03:bd:da:e0:bf:91:8f:6c:01:18:b1:
f8:26:25:09:b7:ac:fe:66:2c:72:a5:b0:99:6c:0a:
a0:33:c0:04:d4:af:dc:d8:40:0a:41:db:60:ee:d7:
8d:82:94:df:8a:69:df:76:e3:69:07:70:5a:19:6a:
a6:8d:0d:02:6b:e6:c9:2d:00:16:a1:cd:a6:3c:a6:
df:b1:ae:ea:cb:9c:3a:b1:91:cd:b9:56:76:a8:d4:
84:aa:f8:cf:e7:1f:89:ce:98:d8:3a:c9:61:08:11:
b0:02:2b:e1:22:ee:d0:5f:f9:ae:08:2c:e3:83:8e:
e0:d0:64:6b:8a:64:20:1a:bf:1a:c5:aa:e1:02:0c:
9d:7e:7f:58:d4:96:92:d4:71:3e:02:02:c4:70:42:
62:2a:ff:3b:e7:2c:78:fa:3f:7d:cf:43:e0:46:ec:
cc:e3:f3:23:bc:3d:ae:5d:ce:ae:67:60:23:fc:13:
2d:4a:e7:2d:76:6e:e0:4c:7d:4e:7f:e7:ab:3a:30:
65:05:fc:e2:12:26:9c:22:4d:94:33:bf:3d:18:d0:
3e:b9:ba:1d:17:f5:57:d7:45:c2:4c:9e:01:a9:cd:
c9:33:50:13:53:c4:20:e6:d8:4d:a1:45:6a:5f:9e:
b1:dd:0f:da:68:52:8b:36:3b:31:65:ef:8d:eb:a1:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.204.0/22
103.5.160.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:64:69:da:f4:4c:dc:04:77:1c:a1:7c:50:4f:72:b5:b9:9b:
a7:d7:3e:3e:f1:e5:b5:c2:fa:1d:41:2c:bf:7c:77:5a:b5:ef:
e9:c2:8d:54:7d:59:04:97:b0:a8:24:8f:1b:03:61:63:36:5e:
96:e5:15:04:36:f7:da:76:54:fb:87:93:e7:04:70:74:ce:6a:
ac:99:3e:40:0b:f1:a4:e5:3f:fc:c3:6c:6d:f1:b6:65:d6:42:
2b:c4:c7:e5:ac:d8:c2:93:e4:ba:4b:c5:7c:1e:07:d7:2e:ac:
90:8e:ab:49:b7:52:de:6d:63:90:c2:23:89:3f:0c:1d:3c:37:
81:26:f1:45:1d:08:95:60:83:90:36:98:8a:96:d4:f5:3e:38:
6a:0b:62:21:03:eb:e0:45:31:84:a3:d7:68:96:d6:6d:8f:8e:
4c:ae:8a:88:48:50:d1:38:f2:3d:55:e8:32:ed:a3:98:2b:be:
21:9b:4a:06:f9:1d:5c:d1:ab:e6:87:e3:29:6b:72:10:02:af:
ee:eb:b6:73:44:e6:49:f5:bc:4a:36:23:38:cf:90:85:44:c2:
62:c6:21:5b:ea:25:8f:a9:ee:11:20:76:0a:d4:0e:d8:87:44:
d0:f5:9c:ef:3d:44:27:58:24:ed:a3:31:6e:f1:56:b4:eb:46:
50:ea:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:32:49 2026 by rpki-client