
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcm1EqwnH-q9ztCMvHpi0Wy10as.cer
File: vcm1EqwnH-q9ztCMvHpi0Wy10as.cer (raw, json)
Hash identifier: gW+173rC/Pqmcq968C9gYdyYLfkvYdxgYvTnTBc7mlk=
Subject key identifier: BD:C9:B5:12:AC:27:1F:EA:BD:CE:D0:8C:BC:7A:62:D1:6C:B5:D1:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CB4F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 13:49:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154799
IP: 2001:df7:5440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183119 (0x2cb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 13:49:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9155C10, serialNumber=BDC9B512AC271FEABDCED08CBC7A62D16CB5D1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:41:75:a7:ef:25:05:8b:ff:b1:5f:57:ac:
7c:fb:2f:39:a4:d3:99:0d:e9:90:e0:79:8d:0f:14:
24:82:b9:6b:82:df:4f:1b:5f:ca:0d:7b:c1:1f:33:
63:12:6f:c9:de:7d:bc:67:bc:c4:62:b4:d5:75:ca:
dd:44:33:4a:32:0c:85:cf:1d:66:2b:c9:c8:94:66:
b5:78:6e:ae:18:99:c1:2b:7d:01:22:d6:af:04:5b:
e3:78:0f:2b:e8:e4:94:a0:3e:be:0c:90:89:d3:25:
2e:87:ef:c9:d4:44:b3:39:7a:7a:73:80:d1:6b:7e:
83:b9:cd:ca:3b:53:58:0b:98:3b:7a:64:70:4c:bb:
42:80:82:9e:6d:5d:bb:99:49:06:b0:d3:08:bc:cb:
11:61:04:92:5f:4b:84:a9:9b:9b:94:1e:a7:09:2e:
c6:a4:e0:93:54:4c:49:41:23:8e:ae:b0:80:39:2f:
2b:3b:3a:4c:52:33:a0:74:be:85:9a:d3:fb:b6:0f:
ae:dd:04:39:d0:fb:13:84:9a:07:37:42:72:12:b0:
9d:49:0f:c5:b1:d1:69:2d:b0:87:b1:f9:f2:df:b4:
3c:6b:0c:e3:da:60:bf:30:19:7e:f3:7a:3a:27:86:
dd:95:9d:94:93:1d:f7:09:24:2f:9a:6d:1b:5f:7c:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:B5:12:AC:27:1F:EA:BD:CE:D0:8C:BC:7A:62:D1:6C:B5:D1:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154799
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:5440::/48
Signature Algorithm: sha256WithRSAEncryption
00:be:de:b3:50:38:08:88:cb:20:ff:72:bf:48:7e:b8:17:41:
44:c5:90:67:7e:d8:6e:37:3c:b0:c6:a7:aa:73:79:a9:39:37:
9f:93:07:9d:09:7d:24:b2:20:fa:ab:30:e5:79:2a:f1:90:3d:
d7:d1:9f:9b:d2:3b:af:31:28:a3:21:ef:0a:87:f8:7f:16:db:
b6:9e:9b:07:52:8a:0a:64:42:c9:3f:fc:09:f1:e6:56:16:9c:
15:ce:c4:62:43:f3:6a:df:b3:64:53:20:7c:d7:a9:98:84:45:
e6:15:ff:4e:5b:b2:e9:0f:f7:59:bc:32:f7:f7:d7:dc:45:c7:
ac:1a:4a:bc:0e:b3:6b:a7:67:90:ba:a7:e4:2a:9a:e7:87:5c:
f7:24:84:89:96:a0:2d:7b:fa:4d:dd:79:e0:1b:a4:0c:69:c5:
eb:a2:f6:b4:08:92:12:dc:8a:fa:59:85:1e:99:cf:b9:50:33:
2e:3c:60:83:bd:6f:77:99:8e:06:54:65:b8:77:ed:85:3a:2a:
91:83:79:d3:f6:1d:65:d4:38:f3:f0:20:37:62:f3:85:a5:a4:
ba:8f:82:d0:0d:a2:b7:d6:68:ab:23:30:38:e1:5b:cd:49:e2:
f8:09:b7:f8:e2:14:4d:e5:24:91:29:ef:1d:70:b1:24:9f:af:
ad:d5:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:02 2026 by rpki-client