Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.cer (raw, json)
Hash identifier: 5hMLpO5rzZ+WjN15fXNVDrVDbTROyle49P7lv5eYtNM=
Subject key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 14:20:16 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 56198
IP: 103.68.125.0/24
IP: 103.75.175.0/24
IP: 202.0.104.0/24
IP: 2001:df6:bb00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173011 (0x2a3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 14:20:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:97:5f:7c:85:bd:fa:a9:7b:63:86:72:7a:
9d:43:f8:ec:48:ed:5f:28:33:b7:d1:8f:59:7b:46:
d5:bd:05:bf:2c:8e:c0:32:0f:5e:9c:e3:13:f1:c0:
29:a6:2d:8d:7d:6e:10:16:d1:b0:72:d4:4b:b6:22:
eb:cc:f2:66:7e:e1:43:27:c7:98:05:a2:39:ff:b4:
01:a1:23:02:7a:0d:cb:f9:e6:26:ea:c2:bc:3b:98:
39:7b:2f:51:e2:c9:41:00:c7:91:2e:47:fb:72:1e:
35:85:22:6e:5d:c6:d1:56:60:4b:80:ce:f1:37:75:
f4:96:ce:3c:2f:2a:86:2b:ed:1d:bd:54:18:8e:97:
c8:80:cf:58:66:c2:00:5f:4d:d1:40:2d:43:60:e4:
78:3a:48:0a:22:bb:ac:18:fa:a9:30:8a:43:94:8e:
d3:ed:72:18:de:7b:1e:95:6f:01:0f:f1:3a:ee:b9:
c9:3a:d0:39:c5:2f:3a:ce:5d:d4:7e:a6:a8:b0:5a:
0f:9f:20:7e:73:f1:64:5a:e4:8b:54:bb:36:77:e8:
85:36:e5:45:ff:3f:c0:ea:5b:6d:f8:98:01:0e:63:
d3:3e:e7:28:bc:c7:69:2c:24:11:d8:13:d9:e0:80:
e1:ae:46:98:6f:57:00:c3:19:d2:83:16:96:ba:a9:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56198
sbgp-ipAddrBlock: critical
IPv4:
103.68.125.0/24
103.75.175.0/24
202.0.104.0/24
IPv6:
2001:df6:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
c5:9b:2b:3e:70:62:3c:96:69:e8:af:02:7d:18:8b:39:24:9d:
72:fc:e4:28:44:a0:81:c5:a5:e2:7c:2a:02:be:f8:6e:5c:46:
2f:4e:fe:df:63:a7:b3:72:92:cc:8f:1b:34:4a:32:de:ed:83:
5f:b1:f1:c8:af:72:28:b9:26:3b:a5:33:1a:50:e8:3f:e3:e1:
b4:bb:39:0a:df:b2:8a:fa:cf:a8:43:0f:50:30:1a:0e:94:9b:
94:87:a9:57:3d:af:77:b2:33:1f:92:c8:4a:e7:9f:60:59:6e:
af:7a:6c:ac:e1:fc:d8:e6:50:67:a5:b5:c3:6e:b8:c6:28:6f:
61:a4:2b:6e:56:f2:15:60:81:a2:29:f3:61:6a:28:48:92:6c:
2f:2d:2b:56:78:dd:c0:8c:c9:ee:6a:62:cb:b3:8f:7e:4f:eb:
07:b5:fc:ec:b7:15:ba:09:cb:18:df:ed:50:45:b9:13:da:d1:
4a:16:76:38:83:c6:6b:82:9f:75:6b:1b:31:35:07:b9:03:f7:
cc:ce:63:b3:bf:8c:9c:93:32:a6:98:c5:32:e3:44:7a:c4:15:
91:8d:8a:ca:11:71:ec:28:d6:56:3e:8a:bc:93:16:11:6d:98:
17:4b:67:1d:97:34:7d:3e:52:50:ab:b9:d6:b8:79:3c:92:a9:
24:b7:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:23:50 2026 by rpki-client