Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
File: DEft4wSONabm6MsM5E_IQ3Jx6z0.cer (raw, json)
Hash identifier: K8LhVxvBwfxvg4pGNyPkql03GQ3YX4XAmxkRj3GFgq8=
Subject key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026C5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Oct 2025 17:34:22 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 141346
IP: 103.157.94.0/23
IP: 2406:9d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158811 (0x26c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 13 17:34:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:e6:1f:02:4f:ae:f6:41:c3:45:a6:37:65:
78:b4:24:c6:c2:51:03:41:29:fb:50:aa:90:13:cd:
35:c9:ee:1c:a5:bf:1d:ee:fe:e6:f1:fb:d2:5a:1e:
ef:82:71:2d:2e:82:80:4d:15:b9:67:81:1e:1f:91:
84:cd:0e:26:0a:0a:9b:d1:4d:ca:fb:fa:dd:7c:50:
f9:28:6d:be:b3:7a:ac:ae:a3:44:0d:a7:4e:80:f0:
41:98:c3:f3:4e:e2:36:45:e7:0f:c6:2e:2b:43:1b:
76:d9:0c:7d:f6:06:7b:d5:88:74:74:b3:16:aa:97:
eb:08:6d:30:f8:b9:88:e5:b8:fd:b7:a4:83:ea:ad:
37:f6:02:67:b7:47:97:1d:09:07:60:17:7b:01:2d:
41:06:a4:9c:f0:f0:a9:74:44:4d:76:fa:02:0f:2c:
f0:76:f3:3f:1d:88:37:13:94:63:cd:53:07:f4:49:
df:12:29:ff:9e:8f:72:ce:47:b9:2f:d8:ae:4c:12:
a2:95:5a:84:ba:c6:77:92:2b:94:34:92:6b:a1:4c:
9c:65:b5:6e:94:46:2f:8b:76:9f:e8:79:85:6d:ff:
1a:24:b2:ac:4e:37:61:a7:3a:4a:af:44:75:1b:7c:
7d:86:b3:c6:6c:3a:66:3d:90:a5:f7:37:0d:b1:1a:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141346
sbgp-ipAddrBlock: critical
IPv4:
103.157.94.0/23
IPv6:
2406:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
47:61:08:a0:8b:a2:11:df:a3:6f:fa:69:56:b1:42:a9:6e:81:
27:0d:15:56:f6:a5:d5:e8:11:24:95:32:71:03:2f:fc:8b:d1:
ff:86:43:cb:4f:1a:d7:f2:02:08:6f:f8:6c:a7:3a:2b:77:94:
c0:1f:a4:7a:34:49:dc:8b:dc:c0:e6:4d:7b:e5:cf:26:0c:1c:
cc:12:0e:ad:fc:bb:dd:16:a5:88:d8:a7:90:69:c4:e4:5d:a8:
8d:73:6c:44:b1:3d:d0:3c:b0:80:c7:67:49:84:b5:e8:63:09:
62:de:3c:63:41:9e:1a:76:5e:1f:20:f3:ea:2e:e2:bc:64:30:
8d:9c:a0:5f:7c:30:65:bc:95:71:a9:da:35:1f:ee:4b:da:2e:
37:07:c7:96:46:6d:7e:fa:4a:6e:da:36:f6:64:00:47:f8:0e:
76:c1:11:98:b4:db:0f:68:fa:d7:98:c1:ee:f7:fd:3d:0e:5e:
7f:88:33:ad:05:7a:40:11:08:af:8f:1c:00:a5:c9:b7:45:34:
c3:cc:7e:a2:44:f4:31:d2:d6:64:53:4f:e8:81:8b:4a:f4:e7:
44:28:44:15:55:d8:82:ca:34:d4:fb:2c:4d:f3:0a:6f:6a:33:
8f:ce:33:e4:4e:2a:44:28:56:61:b6:6b:6f:1a:b0:25:9a:f6:
e3:15:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:30 2025 by rpki-client