Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.cer (raw, json)
Hash identifier: pb98iO2H5A4P8FNokumWX/45IrhnzKLB8B8IFNOQnDM=
Subject key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026285
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 14:14:52 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140679
IP: 103.142.148.0/24
IP: 103.251.168.0/24
IP: 2001:df3:7a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156293 (0x26285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 14:14:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:fa:f2:01:82:66:bc:ee:57:15:49:d0:9c:
84:51:1f:b2:f9:94:c0:fd:9e:4c:32:00:ae:ab:90:
45:09:ad:b7:db:93:90:a8:71:09:1d:59:26:30:19:
ee:6b:64:a3:c3:63:83:7d:64:47:dc:0c:f0:33:f1:
4e:bd:ee:ed:e5:86:59:7f:18:66:19:bd:ee:33:47:
1a:5a:0c:0b:2d:c6:e3:f5:41:88:f3:e2:d9:b2:60:
76:9c:82:98:10:aa:d2:5c:7d:b3:cf:cd:73:77:3c:
46:b9:a8:ad:c1:ca:b4:51:b8:eb:d0:82:64:a3:5a:
ad:70:c1:2b:5e:cc:16:ba:0f:43:95:c8:9b:4b:42:
51:98:7d:5f:8d:80:c4:c4:bc:f0:c7:d9:00:62:57:
55:97:9b:a1:4c:dd:bc:e5:36:a3:fd:bc:0e:7e:54:
ec:f9:ce:48:9c:f2:e6:da:f4:9e:32:ce:04:09:9b:
1b:1c:5a:db:c8:6d:46:10:2f:41:a5:4f:5a:cb:3e:
db:50:6d:ba:b6:67:b1:99:9e:ee:68:9d:05:6d:a0:
9d:1d:eb:fe:ba:00:3d:b0:38:5c:3e:81:66:a9:c1:
e5:31:f9:ea:3e:f7:c0:83:db:39:5d:5a:b1:22:71:
af:f0:c6:62:d1:cf:bb:03:2d:60:89:51:9d:1a:6b:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140679
sbgp-ipAddrBlock: critical
IPv4:
103.142.148.0/24
103.251.168.0/24
IPv6:
2001:df3:7a00::/48
Signature Algorithm: sha256WithRSAEncryption
a1:29:f3:9d:cb:93:48:28:b4:b1:26:b7:23:99:b2:fc:62:c3:
b7:d2:95:0a:6d:58:99:90:3a:48:f8:70:28:f5:58:df:07:05:
71:34:b3:9f:d4:68:09:5b:8f:40:40:31:3a:a5:14:1c:b9:79:
1b:48:b8:f0:4d:77:14:79:57:cb:ed:92:8f:21:3d:f0:72:dd:
80:d5:f4:6f:47:27:98:0a:df:8d:f4:01:53:30:81:08:af:65:
40:5e:25:5d:0b:85:be:fc:d6:ca:10:d2:57:e6:ec:0c:26:89:
61:4a:9a:d5:ca:63:57:ca:de:df:19:dd:6a:6b:4e:55:ea:0b:
f3:ae:62:f6:ed:b3:52:6c:b5:50:61:1f:fc:e0:9d:dd:db:51:
57:58:53:17:56:c5:e1:12:b0:a7:5b:9b:77:4d:ec:9a:3b:25:
86:72:b7:c6:37:96:2e:3b:f1:bd:3d:be:39:36:31:2b:6e:6a:
92:7c:1d:3b:78:ab:04:27:69:67:77:0c:bf:38:4c:d5:f3:4a:
7a:8a:30:67:b9:30:e3:50:c6:dc:d6:4d:38:ac:5d:4a:29:a2:
14:2a:18:90:aa:8f:45:ed:c3:76:cc:b2:b1:8c:0a:7d:64:6f:
8f:a8:86:41:77:a5:6b:62:4e:52:72:79:87:b7:cf:cd:e8:94:
87:93:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:57 2025 by rpki-client