Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
File: 446z9aUQfjDwynHd6nWxcNCwMlY.cer (raw, json)
Hash identifier: 5d6SOyH/79gG6sV58yGFR5YDbvzVYM0edpl22pXMLkE=
Subject key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026C9C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Oct 2025 18:02:52 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139318
IP: 103.108.174.0/23
IP: 2001:df1:1840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158876 (0x26c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 14 18:02:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:b8:33:ac:9b:cc:9b:3d:89:46:a2:64:32:
70:ec:ec:f7:e2:bf:8d:09:da:0e:25:a9:b6:a8:b8:
b5:84:8e:0d:40:4f:bc:96:ad:43:09:9c:a4:3d:1d:
2e:66:52:0f:c4:ad:39:f5:79:c8:10:89:4b:1e:0b:
4f:74:41:25:ee:f7:84:c1:82:b6:98:ca:a9:de:97:
b3:a6:b6:e8:cf:de:2f:b2:9d:cd:4d:53:27:b3:1a:
ba:4f:22:3c:b3:73:ea:46:b2:db:24:e5:ee:39:d0:
c7:85:8e:9a:e4:d1:9d:c4:62:df:32:ea:8e:d5:93:
f1:95:1e:3a:04:dd:45:85:24:49:60:9c:4d:18:b5:
76:57:86:04:03:82:e9:ec:fe:a1:6a:54:08:7a:f0:
e3:c1:ef:65:d9:5b:c2:13:bd:8f:64:40:f7:8e:16:
41:94:15:41:55:da:b2:c8:43:09:69:f1:d6:87:fb:
f2:e8:3e:87:6d:bc:fe:a5:71:7b:d0:49:a6:71:31:
78:b4:6c:74:e1:ca:8a:61:32:94:a9:a5:55:46:c0:
24:81:d1:ad:60:db:ae:6a:c1:e8:76:3e:cd:65:b4:
62:54:20:c2:f4:c4:41:1f:9e:18:f7:cb:fd:f0:78:
d2:c6:1e:69:53:c8:8d:8a:00:3c:1b:dd:11:4f:4f:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139318
sbgp-ipAddrBlock: critical
IPv4:
103.108.174.0/23
IPv6:
2001:df1:1840::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c0:74:c0:74:e8:4a:af:43:55:41:70:04:08:45:da:72:95:
4b:25:a9:3a:1e:13:3b:91:84:3b:99:86:79:50:75:56:f0:db:
7b:0d:f9:82:53:f8:7a:40:35:b1:f5:61:f9:53:c5:ea:96:a7:
6a:06:f6:e0:4a:12:29:52:35:53:e6:c3:e6:58:22:87:b7:32:
95:28:bf:11:91:5e:1d:d6:1e:f1:cb:fe:c3:25:8e:b9:11:47:
ef:87:4e:0f:23:b7:5d:96:19:07:0c:a6:2e:4f:9f:f9:59:75:
9b:f4:26:c9:d7:16:68:cd:9c:11:31:34:44:38:30:fa:af:6e:
0a:06:8d:62:c4:d8:aa:27:fe:19:d0:5b:f6:64:16:c7:8e:4a:
5d:2b:11:5a:31:25:4f:fd:ab:89:db:15:a4:e6:45:0e:97:5a:
62:36:1a:2d:a0:79:3f:f3:2e:37:e4:08:1e:1e:9d:bc:32:17:
48:51:96:5f:fb:bc:6f:f1:b7:09:a5:1e:3c:11:dc:ae:7f:a2:
9d:b4:50:3a:dc:b6:44:4f:cd:06:01:8f:b4:80:c9:e8:0e:25:
22:20:59:00:d1:a5:c4:7f:d3:10:8c:e5:60:84:27:b1:42:d5:
b9:99:7b:df:3f:81:57:85:4b:77:e3:57:be:3e:17:90:c7:98:
22:bc:56:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:03:24 2025 by rpki-client