Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
File: ED-ovf_7nwVXByxHMyuBqegO3TU.cer (raw, json)
Hash identifier: K0Y7CZGmg5WB/UuI90i/u/TdomQpiFYivhVcFeGMgAA=
Subject key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026AFC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Oct 2025 14:43:11 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 64061
IP: 103.237.100.0/22
IP: 163.53.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158460 (0x26afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 7 14:43:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:8f:e2:b0:5d:2a:58:0c:35:4b:d8:c8:fc:
f7:c0:ad:2a:23:ea:ef:50:8d:e0:2b:fc:72:03:06:
cf:dd:ac:50:54:51:b7:2d:e3:4f:d1:85:8e:75:11:
2a:85:ce:ae:eb:07:dc:3c:59:5b:66:1f:b7:b3:4f:
19:ed:9a:35:52:bd:c4:69:b8:73:7b:80:74:5a:7d:
92:43:35:c4:e8:4b:ec:60:2a:88:17:84:4f:ae:a1:
c5:6f:6a:d4:b2:6e:87:c0:69:fa:61:39:88:91:c2:
09:79:2e:f2:29:0d:3a:2f:27:eb:d5:3b:9e:06:32:
4c:70:a4:df:71:a9:0e:87:53:ef:57:78:f3:3a:86:
23:e2:fe:4f:50:d5:f4:af:c2:31:25:9c:3e:bb:1a:
a5:9d:ff:a9:dc:01:5c:f4:48:c7:27:2b:ca:14:3b:
24:8a:7e:df:8c:dd:5e:38:05:b7:da:8c:fb:15:fb:
e5:09:1c:d6:b8:a5:02:a9:b5:ff:c1:0d:87:8e:10:
95:34:b5:c7:43:75:86:aa:93:cb:98:c0:6e:36:41:
2c:5f:d2:44:46:42:a2:e2:1a:f0:5d:1a:b3:9b:f0:
8e:68:37:f9:35:62:46:ba:64:ef:a4:96:78:26:15:
da:d0:7d:ff:fa:14:20:ac:4b:96:4b:2c:b6:4d:ea:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64061
sbgp-ipAddrBlock: critical
IPv4:
103.237.100.0/22
163.53.244.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:8c:cb:e3:3b:ba:0c:e0:46:97:da:5c:94:1e:22:a9:7d:e2:
65:8f:5e:e1:4a:39:ce:39:bd:d1:f8:f7:09:aa:54:f2:6a:c5:
26:36:03:d9:7e:0f:4b:ab:cd:7a:e3:6e:62:4e:0f:3e:34:97:
59:61:6d:a2:51:a8:0d:d4:75:2d:b5:a9:ae:93:57:10:21:7e:
22:87:a5:e0:9d:a6:c9:bc:db:e6:50:a6:02:e6:0d:df:48:53:
68:bb:d8:92:a8:4f:02:6b:52:4c:e7:75:4a:e0:54:b3:9c:63:
68:69:bf:fc:2c:c3:7a:52:c3:71:51:6c:4c:20:40:bb:6c:ac:
44:82:a3:58:b4:fa:3f:70:9c:e9:6f:b1:22:fe:0b:a8:24:80:
22:a2:c2:13:d1:8f:4e:32:dc:b3:98:ec:cb:40:20:d8:02:5f:
15:15:f2:f9:41:e6:23:5b:fc:73:cb:5d:2d:63:1c:a8:e4:0c:
19:c7:db:db:87:7b:bd:21:3a:6e:d9:56:bf:ef:af:cd:b1:f2:
1f:ec:20:b9:d2:5b:5a:2b:64:b7:16:62:b3:ac:9b:57:8c:ce:
a6:28:4c:ea:2d:7e:57:6d:f1:da:fb:0e:0f:f6:b8:1f:e7:ea:
8a:13:f7:2e:d1:ed:07:60:90:58:d9:0f:93:4a:5f:23:30:37:
58:8e:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:06 2025 by rpki-client