Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer (raw, json)
Hash identifier: s1X+J65kdHMJtNNC5gnxbNwoo5D0BIhip3g+HrB6vLo=
Subject key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026889
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Sep 2025 14:02:50 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 141154
IP: 103.155.98.0/23
IP: 2001:df4:c080::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157833 (0x26889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:02:50 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:a9:3d:2d:40:03:7b:b1:4d:16:c4:9e:5c:
32:0d:b0:79:4d:66:9c:df:52:00:87:df:9b:ff:82:
85:c2:4f:77:f4:24:55:34:74:be:2e:f7:3e:41:fc:
3d:ab:76:6e:c0:68:83:19:50:4d:fe:32:b0:c9:07:
ec:a9:36:33:da:60:56:55:e6:52:de:bc:bb:64:e5:
89:ee:21:38:96:62:9e:f6:24:b9:3b:7e:50:a2:43:
86:bb:df:0e:ac:5f:f7:c1:ab:d5:f2:c4:d3:ee:4c:
0a:7c:b9:9a:aa:fb:ac:bf:f4:2e:96:1b:72:81:3a:
ec:bb:d9:d6:fa:8e:8f:90:33:09:d0:f7:e3:82:36:
18:e6:ab:f2:a6:36:c8:05:86:e0:53:5a:b7:2b:2f:
59:9a:03:ed:a8:f4:8d:a4:26:d8:2f:02:9c:49:ab:
cb:7a:26:ff:a3:de:dc:71:63:db:a9:6a:70:80:ea:
2b:f6:d3:d2:90:75:35:ec:d7:dc:9c:45:18:f3:3f:
56:e3:5f:ec:e7:4e:e1:bc:9c:ab:47:9c:26:80:cf:
ec:2c:aa:a6:6f:62:ec:29:af:99:c5:51:e7:e7:fb:
20:30:d1:ce:b2:24:64:9b:b9:ce:e4:65:46:40:a9:
be:1a:01:bb:f3:3c:e5:20:38:ce:49:e1:17:fc:60:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141154
sbgp-ipAddrBlock: critical
IPv4:
103.155.98.0/23
IPv6:
2001:df4:c080::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ce:14:55:9d:2e:3a:7a:fd:c8:be:1a:03:2b:df:fb:e3:43:
41:d3:a7:c5:ce:71:7d:75:af:b5:5f:f8:84:4d:a2:b3:eb:83:
ec:a3:96:50:5e:5e:70:aa:8d:2d:53:7d:ca:2b:db:1f:c5:e6:
35:35:b4:a7:4a:87:e6:ae:ca:20:1f:9c:f7:e1:00:9e:48:4e:
a1:c6:52:26:f7:4a:85:70:93:a5:31:d4:68:05:b1:c6:85:ca:
fa:ae:a5:b5:d0:c6:7c:6c:e5:91:83:1f:09:ba:bc:2f:33:69:
cb:15:53:f2:3d:3a:42:ad:59:53:5c:e3:cb:36:a8:40:dd:a5:
e4:4a:dd:89:e4:99:78:3a:d0:ce:3a:e1:32:21:d0:d9:f6:0b:
9c:76:1c:51:ca:8b:65:51:7e:d0:ed:2e:df:00:7d:be:7e:45:
6c:49:0d:4b:ff:12:7f:c4:1c:cd:b4:f2:57:77:cd:b5:af:2e:
61:ec:8b:30:8f:d3:44:af:aa:8b:f6:47:0c:95:1c:34:8f:a9:
08:36:5b:4d:a8:4b:18:2d:91:0a:53:e5:12:d0:50:a5:18:51:
a6:bc:c2:e1:22:e7:c1:6b:2a:f2:a7:24:56:97:e0:c6:25:cb:
a8:23:0f:46:5a:f8:e4:8a:8d:1d:af:65:9f:94:b0:c0:76:f2:
fc:8e:09:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:34 2025 by rpki-client