Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer (raw, json)
Hash identifier: yq3JNXlsq6f1P0QU0eLhcDa9j/JuC09MQtk2ryljvok=
Subject key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026AC6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Oct 2025 20:36:44 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140957
IP: 103.153.198.0/23
IP: 2001:df4:5880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158406 (0x26ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 6 20:36:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:e5:aa:df:88:90:36:87:ab:4a:47:0b:6b:
3f:4c:28:50:d6:12:40:b9:64:bc:e4:1b:48:02:0b:
70:ad:c2:85:ff:89:5e:c7:87:02:2e:81:e6:47:32:
87:78:a9:cc:67:c6:8c:4a:52:ed:5c:4f:da:af:f5:
09:64:b7:39:c7:6c:f4:61:e1:97:00:d3:32:d6:b3:
4a:52:4b:57:3e:43:9e:f1:f3:e4:27:ab:3c:3a:cb:
1f:fc:55:e6:c7:0b:f8:12:21:2b:0a:d4:bd:d1:95:
d0:ac:48:54:4e:a8:30:8e:53:0a:af:86:0a:cb:ef:
cf:c3:80:1b:08:00:73:f4:3f:8a:94:16:f2:c2:9b:
e6:c3:4b:90:12:20:80:27:20:0c:62:c6:d2:10:fd:
bf:c0:a3:67:78:76:94:13:19:0a:a7:d6:91:ae:a6:
37:c1:ca:67:23:92:96:45:5f:10:30:6e:e3:81:d6:
2b:8a:9a:56:26:60:68:d9:e0:3a:cf:3d:14:ae:3f:
a7:f1:d5:0a:50:ca:aa:8e:3c:bd:63:0b:b8:32:fe:
ea:95:73:ce:53:5b:6f:83:8b:6a:f4:89:fa:ba:1b:
3f:29:0c:01:72:02:4c:3a:18:ae:b9:bb:c4:4b:eb:
2e:9f:12:dc:5f:d1:d8:69:4d:f8:a1:c5:ab:15:bf:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140957
sbgp-ipAddrBlock: critical
IPv4:
103.153.198.0/23
IPv6:
2001:df4:5880::/48
Signature Algorithm: sha256WithRSAEncryption
18:62:2c:8c:08:71:eb:24:d9:37:8a:c2:29:fb:c9:75:82:91:
97:ea:d0:06:f6:44:ea:f3:66:c8:a4:9d:28:4a:86:5d:2d:7f:
fd:1a:3d:ce:89:73:63:1a:86:e7:ff:51:45:8f:d8:a8:40:f9:
25:3e:0c:37:a8:13:f5:96:0a:63:8a:5b:ea:c1:bf:ba:0f:0e:
ba:fb:dc:46:d7:ad:c0:b0:d9:ba:d5:27:56:b8:2b:c3:22:cf:
a0:f7:19:c0:e1:aa:db:0b:7b:fe:5a:1f:5c:05:c5:80:b2:69:
8e:43:e2:64:ad:d5:4c:de:c2:1c:8a:0b:4e:c4:fc:b6:7c:66:
4d:99:a2:50:0a:62:c2:86:60:92:b6:d1:a7:d5:2a:c1:e8:c3:
e8:56:12:2e:99:20:72:3a:93:42:38:46:ce:b3:ef:9a:e9:e8:
a7:b9:8e:c3:9f:91:e7:8c:9c:2d:5b:42:ce:aa:29:18:dd:d4:
62:9c:64:08:d2:2d:2f:d5:f3:05:ef:2d:b5:c6:03:fe:cc:61:
61:9b:30:11:8c:c7:dd:bf:cf:ce:a6:58:46:15:64:49:7a:77:
04:31:8a:1c:fe:be:ae:66:c4:5e:ae:90:80:e6:f4:bd:4e:56:
17:25:6a:9b:fe:22:3a:a1:6c:42:6f:56:55:40:e7:25:e0:9d:
f4:b0:0b:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:39:55 2025 by rpki-client