Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
File: 5EZZ6m_c00PGwef_0BSlsHgYlos.cer (raw, json)
Hash identifier: 4mJpziQiZXYtkaGqxooceJOwRyM/L3YbsYgSXNxnSBA=
Subject key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D36
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Oct 2025 21:00:06 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 141231
IP: 103.156.222.0/23
IP: 2001:df4:ff80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 04:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159030 (0x26d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 21:00:06 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:d6:68:98:7c:16:00:48:0c:ec:0e:5d:fd:
8a:8e:79:ad:f5:52:35:d8:40:48:f8:56:fa:d3:04:
44:ea:15:43:bd:e4:2a:f6:04:96:af:1d:0a:c5:a9:
31:bd:83:19:82:be:82:5f:47:d8:2b:82:5b:c8:31:
73:37:1e:2d:24:88:2e:43:4b:55:19:6f:2b:c3:92:
74:2f:9b:76:7f:0c:5e:d0:78:ee:2a:2d:1a:65:e2:
fa:d4:3d:9a:5a:7f:3f:46:6d:59:5f:fe:92:34:3b:
ef:10:e4:69:1b:f3:6d:13:9f:2f:41:a7:bc:1e:99:
c5:2c:9d:e8:8e:c5:b0:cf:64:fc:37:5b:01:f3:45:
e0:a3:f7:4f:2c:4e:c5:a2:0b:b7:d7:cc:d9:31:f5:
83:b5:91:2a:02:05:fc:b6:4e:d6:05:67:57:77:51:
ec:04:ec:fc:f4:f9:f8:4c:83:45:b6:a7:7e:03:b5:
0e:2a:3d:02:ae:98:5b:29:1d:9e:d4:ee:12:91:14:
43:2f:0e:5c:39:ba:df:4d:9a:47:40:29:78:01:8c:
9d:df:7b:99:65:15:95:36:52:b0:ae:86:54:7d:7a:
60:cd:87:78:3b:8f:ef:7e:dc:56:ff:15:da:e8:ee:
3a:ed:27:85:fd:e2:ac:33:73:71:37:85:c4:8f:6b:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141231
sbgp-ipAddrBlock: critical
IPv4:
103.156.222.0/23
IPv6:
2001:df4:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
c1:2b:67:2a:e3:c0:e6:82:07:fc:c5:35:2e:c7:7d:25:54:ce:
06:95:9c:1e:d3:e1:56:a2:5a:c1:a8:06:30:ae:d1:dc:80:54:
d9:85:b7:2c:ba:7c:f6:ae:3e:0e:03:2a:66:61:c4:38:25:7d:
ed:30:a8:ec:60:3d:9e:5d:26:88:30:7f:64:79:f7:c1:a4:b9:
67:65:f8:a0:cb:92:d2:2a:9f:3a:1a:5c:b8:27:aa:21:0f:5b:
bc:4f:c6:bf:53:4f:4c:1d:fe:19:ad:57:0c:bb:1e:2b:2c:7b:
f0:f2:d2:63:d0:fe:f3:6d:e6:20:b6:62:f1:02:55:e4:c2:9b:
7a:1c:8e:81:2c:ca:f9:e8:62:cd:9a:80:4a:cf:82:28:f2:58:
e7:09:06:5e:4d:19:04:2c:16:cb:50:16:2e:74:18:a5:a4:62:
65:ab:4d:31:a0:10:0f:51:5f:11:67:95:61:8d:a6:7a:d7:d4:
62:3e:d2:31:31:cf:f0:4a:40:e8:e6:d0:d3:37:1d:b4:31:7e:
70:15:f7:25:e0:2f:62:be:7a:43:92:9a:dc:75:db:10:63:cb:
5c:f2:b8:15:f2:b2:73:82:38:07:b2:56:25:58:57:60:c0:39:
32:1b:0e:7f:03:f3:6f:9b:98:56:62:5a:59:39:19:a5:0d:86:
df:88:8f:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:13 2025 by rpki-client