
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
File: 93GBTPa_DRm2MkkI0H4eQKu-924.cer (raw, json)
Hash identifier: PGOsrGfUnnGw7pA0sFMzeqaLgU8lTLu5bZV7BTUGoKI=
Subject key identifier: F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026272
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 12:54:56 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 137976
IP: 103.119.20.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 13:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156274 (0x26272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 12:54:56 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91D15BF, serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:5e:92:9f:3a:aa:60:2b:ff:ee:67:30:59:
a4:53:49:f5:e5:30:f8:1a:a8:a9:05:08:77:9e:27:
8a:f7:85:4a:9a:01:77:c8:29:93:fd:c7:c2:db:79:
79:c0:12:55:0e:75:d8:56:be:a0:2e:8a:d0:b2:02:
99:95:c7:ed:d2:61:73:0d:ab:34:df:68:d2:ef:11:
dc:32:72:14:bf:a2:7e:9e:2e:1a:ef:8f:63:b7:2d:
d2:79:34:77:6e:74:db:5b:95:a2:d2:23:d2:30:e7:
99:53:76:27:7c:61:81:c0:f6:9c:52:8d:9e:8e:ac:
d1:b1:b5:08:72:0e:43:24:a3:8c:e3:97:95:78:78:
98:ad:32:88:95:69:55:2a:a3:eb:52:49:5a:5c:f1:
67:65:4d:f8:2f:60:2f:fb:21:f0:fd:f0:05:ce:03:
2f:a7:85:e8:e8:de:9f:a1:ac:d9:e1:20:99:7c:30:
4d:03:8d:63:35:bd:e9:cb:5e:09:57:17:b4:60:2d:
30:7e:f5:e2:8d:f3:ad:a7:1a:dd:a9:2a:3c:88:3d:
fe:8e:08:5b:9e:ea:c8:88:b8:e6:70:a4:5c:6d:10:
ea:6a:75:b7:4a:5b:5b:e4:12:4f:9b:24:31:77:1f:
8c:4d:17:63:80:31:8c:16:1b:13:dd:2f:65:4f:63:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137976
sbgp-ipAddrBlock: critical
IPv4:
103.119.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:65:c9:42:5a:41:f3:89:eb:f2:54:99:89:2e:3f:66:34:ef:
3e:2c:3d:f4:4f:82:59:a4:71:5f:bf:27:0e:b7:e5:d9:d8:02:
76:59:46:12:1d:66:ac:a7:a0:d8:ee:b5:f8:32:78:32:7f:d0:
b4:1f:22:b6:33:e7:32:cc:17:4a:18:6e:e9:76:40:e8:7b:f2:
01:b9:fb:60:9e:a2:44:af:35:7f:99:d0:44:b9:84:08:9e:f9:
ed:62:06:42:60:87:a0:fa:77:3f:c3:c2:1d:1a:a4:e2:a3:f8:
77:08:cf:18:29:7f:bd:b3:99:c4:00:b3:52:5b:1c:08:9d:aa:
85:34:de:90:0b:3e:0b:92:9b:c1:94:db:91:33:70:cd:65:e4:
51:fa:10:45:e8:b3:f0:ab:e3:03:66:e3:b3:f1:0a:8c:ba:ae:
ab:d7:2b:5f:4b:5e:b5:7c:c4:16:3c:1d:7b:ae:fe:e3:0b:ca:
18:8c:d5:55:92:4d:c5:bf:77:e4:7b:b2:4b:6b:e0:30:77:45:
6d:8e:8c:b5:fe:8c:d7:fb:82:02:8f:42:35:7e:a0:0f:80:0d:
9f:f2:ce:f3:47:e5:a6:87:92:9a:12:2e:9e:ef:8c:56:fe:5f:
60:49:ca:b6:1b:cc:3f:3f:88:e4:6c:f9:0a:15:89:29:53:8e:
7c:74:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:16 2025 by rpki-client