Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
File: 2CWolzNYl8B-dpODimvyAnZYDwM.cer (raw, json)
Hash identifier: x/Tv7Riw9uH8gEjwxwcXT4OAN+f7T4TguXCGa2RSvCU=
Subject key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0265CC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Sep 2025 23:05:04 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 142056
IP: 103.166.31.0/24
IP: 103.170.63.0/24
IP: 2407:ae40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 04:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157132 (0x265cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 23:05:04 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:c5:25:65:82:3a:69:89:fa:7c:25:4f:92:
83:32:f0:2f:33:d4:59:eb:78:8b:3f:0c:e7:83:83:
73:f1:5c:d7:b9:03:b4:d7:31:e1:3e:a9:d4:d8:9a:
f0:8c:33:b5:40:42:7e:89:cc:56:d8:1d:f0:8b:43:
64:12:02:8e:98:e5:96:c3:ad:7b:32:c7:cd:87:cc:
da:16:59:05:90:97:ba:52:e1:5f:95:63:e6:63:04:
03:06:d3:e8:8a:6d:62:29:8b:bd:98:4f:29:36:25:
5a:8e:2c:38:bc:d9:3c:30:46:34:2a:9d:b8:0a:50:
3d:0d:e6:9e:88:80:8d:f2:4e:ff:d4:84:92:75:a0:
a3:dd:48:ed:eb:ad:d6:26:7a:24:b0:8d:cf:55:4f:
28:88:24:90:a6:ec:b6:6c:cf:44:97:64:e9:3a:0a:
9d:cc:ed:13:79:01:2d:fb:ac:bf:b7:3f:10:c9:87:
2a:a9:6c:de:f5:d2:b2:4e:b3:21:86:5d:13:64:71:
9d:fa:39:7c:4a:a8:4b:3e:d1:25:ab:64:b5:6f:29:
82:ce:84:24:ec:11:e2:bb:dc:e5:fe:e4:b7:41:49:
a2:4f:79:05:88:67:1b:a8:e5:41:9a:7d:ba:fc:5b:
14:e5:23:c6:7e:1c:71:98:18:5d:ed:d7:b6:a6:3b:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142056
sbgp-ipAddrBlock: critical
IPv4:
103.166.31.0/24
103.170.63.0/24
IPv6:
2407:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
46:fc:06:56:ec:73:c0:a3:b9:3a:3c:7c:70:cd:18:9f:e1:55:
de:67:3f:e3:c8:5c:7a:39:e0:2c:04:dd:ac:d0:5c:ab:66:5a:
18:5e:6b:8e:92:0b:7b:ec:a2:24:4f:27:e6:de:7c:3e:a4:64:
87:0e:a8:46:e2:e9:5a:db:41:fa:0a:40:f3:5a:57:50:bf:b3:
0f:44:eb:7c:9b:c6:77:a4:ab:34:eb:f1:1d:34:fc:42:6b:68:
8b:0b:9a:9b:94:47:2c:1d:6f:23:5f:63:e8:e3:82:09:d1:c4:
5b:ef:8b:0b:76:cd:19:3f:90:23:30:7f:35:8a:a9:54:2a:0e:
bd:e1:0c:27:ac:80:62:db:b4:21:bc:21:1b:50:27:64:1b:1e:
41:20:bc:bd:e9:d0:de:b7:cc:a2:e8:e5:2e:aa:ee:94:b3:bd:
18:a3:5f:8e:5a:3e:96:76:58:db:1a:05:c4:ea:7b:1f:be:fc:
4d:1d:ad:e7:69:a7:45:63:66:28:3e:93:09:f3:fe:23:36:74:
39:3d:51:3d:3d:b2:18:80:58:b2:fd:fa:45:46:1a:66:07:18:
68:6a:87:17:a7:57:c4:8a:6b:47:b2:e1:6f:c3:e0:a9:37:45:
a2:23:2e:0b:9d:f3:9b:57:18:ea:ba:49:5c:c0:b1:35:d1:ec:
70:20:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:49 2025 by rpki-client