Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.cer (raw, json)
Hash identifier: EotYp3Tke8H/3pH6BzhvmTTBkPklrvIr7C5QWQl762s=
Subject key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026883
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Sep 2025 12:59:30 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 151654
IP: 103.250.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157827 (0x26883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 12:59:30 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:48:43:32:31:e5:a6:f7:29:1e:fa:07:dd:
44:36:aa:97:28:dc:b2:ee:48:a5:78:38:53:86:da:
73:8a:83:1e:47:13:59:f9:9b:8f:61:07:60:23:a3:
f7:ed:b4:c4:6a:0e:1d:4a:a0:21:34:5d:0b:f2:03:
ef:fd:74:2b:94:69:8c:b4:ec:3c:65:c9:41:fa:38:
d6:37:50:e2:a6:54:2c:49:d6:54:d3:f6:52:3a:d0:
84:5d:64:8e:0a:08:e8:a7:fc:7c:50:0d:42:39:78:
6b:4c:60:77:f5:f0:ec:29:da:77:4a:f6:1c:d4:df:
6d:d8:5b:c5:e4:66:1f:a8:a7:f3:02:5c:23:af:71:
00:8f:6b:e3:74:21:bd:62:d6:8f:aa:b8:2a:db:77:
f1:2c:b6:1c:69:97:89:65:54:2a:03:6d:8d:86:15:
c6:51:53:b6:e0:e7:62:7a:9e:2f:a5:db:6e:1a:26:
57:5e:6b:d8:3c:63:54:aa:0a:33:76:85:9b:b1:5e:
16:dc:42:6d:97:69:07:83:74:8d:70:60:67:54:0a:
ab:70:c7:7c:7a:9f:72:d3:9c:e9:69:ce:30:60:bb:
6e:5c:af:28:c2:f7:ba:4b:2b:fa:f2:7d:33:0e:32:
85:bd:3c:10:97:8b:c0:e4:4d:01:76:6b:6e:e0:6e:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151654
sbgp-ipAddrBlock: critical
IPv4:
103.250.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:bb:cf:c5:cb:71:54:65:a5:14:e6:2d:27:92:9e:09:de:4c:
b6:53:36:29:ae:03:f3:56:b5:33:34:89:b4:bd:6f:b3:4b:2d:
6d:61:61:34:0c:0d:b1:26:31:1b:0c:07:aa:67:ba:6f:9e:de:
17:62:e5:03:6c:05:78:3d:f1:bf:ca:98:c6:1e:e6:81:99:aa:
e9:fa:48:b1:3c:e7:00:3b:f3:64:15:8c:62:1d:2d:f1:d7:63:
15:7c:be:b5:e9:7e:2e:96:7f:51:91:65:f2:2d:cf:f1:c0:b4:
0b:34:47:94:c4:c9:5f:81:c6:5e:f1:25:8d:d7:e3:e3:42:f8:
6c:50:72:dc:0a:46:49:f5:2c:5b:13:56:5e:7e:61:5c:54:fe:
52:01:64:a9:f8:43:3d:18:6c:8a:06:2a:f4:da:df:24:cf:1f:
47:92:a7:42:17:c5:1b:0a:f0:6f:1e:a9:ee:7e:00:bb:27:31:
5c:7d:5a:9d:fa:66:53:6a:2c:30:ab:c6:3f:e1:49:1a:f2:9d:
9d:80:62:69:02:85:5a:5f:a1:be:cc:bc:43:25:f5:67:49:06:
74:fc:01:36:79:ff:f9:d8:48:53:65:2c:8e:bd:fb:82:61:9d:
d1:4a:68:7a:0b:b0:8d:31:a8:06:f2:77:d8:81:30:45:e9:9e:
76:5d:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:15 2025 by rpki-client