Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
File: 5c6UvYXPCPR6j97JcE8dztA4Bow.cer (raw, json)
Hash identifier: xxsXHGG1kyYNZG5uI7woGrKiYTB2STkDwlmMwEziNpE=
Subject key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02661E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Sep 2025 15:06:08 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 131189
IP: 103.38.144.0/24
IP: 103.85.212.0/24
IP: 103.198.18.0/23
IP: 2001:df1:b0c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 12:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157214 (0x2661e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 18 15:06:08 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:8a:6c:84:21:6d:96:aa:b8:87:94:5d:52:
89:f8:98:a7:4a:70:18:73:1d:28:52:17:7f:41:5a:
d9:33:41:58:ad:70:fe:c1:cc:1b:49:f7:42:34:c2:
52:7d:6a:96:c2:ac:e7:4e:b7:38:f5:04:55:1d:76:
57:c7:9e:b1:67:fb:0b:67:c0:c1:48:7d:8c:0c:1a:
b2:94:3c:0b:33:cc:d3:e2:e6:65:d5:d8:af:2b:39:
2a:49:8e:0f:27:e0:f0:90:b2:88:e1:62:35:cd:8e:
cf:c9:e0:35:09:50:55:fa:dc:c7:82:ca:c2:f4:9a:
c9:f0:b1:23:db:98:69:25:47:e9:71:08:09:d6:78:
bd:42:09:bb:f8:99:27:bb:9e:3d:9a:ad:06:98:a6:
05:3e:f6:99:b5:ad:bf:55:c3:40:16:f8:d7:69:80:
e5:12:e6:46:c5:e6:ab:09:a8:3a:92:19:5b:b0:7b:
08:16:52:63:8e:dc:08:c7:d7:32:93:a5:df:f0:22:
66:0d:8a:75:c4:bc:78:1a:ff:97:e0:0e:6f:c9:54:
44:bf:c8:b1:d9:d7:9d:a5:44:4e:ca:cc:89:59:35:
1c:36:d5:24:fe:9e:ce:db:e3:0b:6a:73:f0:0d:3b:
2c:e9:a4:7b:d6:13:a7:37:9b:84:43:99:f9:c2:1e:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131189
sbgp-ipAddrBlock: critical
IPv4:
103.38.144.0/24
103.85.212.0/24
103.198.18.0/23
IPv6:
2001:df1:b0c0::/48
Signature Algorithm: sha256WithRSAEncryption
d3:03:c5:5f:d4:59:b5:b2:5d:ea:fe:8c:42:d2:b4:34:06:9c:
b9:97:c2:3c:3d:1f:65:81:81:a1:b5:57:2c:52:c8:d9:04:58:
c7:16:30:a4:0e:86:d9:af:20:51:cd:b8:13:83:7f:0a:44:b4:
91:0d:90:8c:7f:3d:6a:23:99:9a:12:ee:2f:ef:ce:fb:b1:0c:
b8:59:28:13:08:52:66:0c:bd:5f:c1:ab:83:a4:e9:2c:4e:23:
58:6f:bd:99:6c:54:c3:8b:21:b4:b0:34:15:f2:43:0f:b1:68:
bd:40:e8:3b:a2:c5:54:40:c9:53:24:f0:0b:c4:e2:62:45:7a:
ab:30:f8:a8:f4:91:f4:f4:7d:c5:bd:24:e2:c3:cf:53:ef:c0:
c6:d1:24:b5:12:a6:c7:d5:0d:fc:e7:94:54:1b:07:4b:23:f1:
e2:ee:ad:19:68:0d:90:39:64:a4:12:b5:15:74:5f:f8:78:bf:
e4:15:5c:3d:06:74:f1:a4:41:1b:5f:3b:98:00:c6:43:cd:11:
5f:e8:a6:a6:28:03:81:41:24:ac:49:e7:72:a0:60:84:87:5f:
a4:a2:d9:25:a0:62:6c:c9:60:e7:09:11:aa:36:17:9f:39:59:
af:db:18:36:34:4b:3b:fe:c4:66:e2:e4:33:56:b8:c3:47:5f:
dd:55:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:38 2025 by rpki-client