Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
File: N-A1JLWEfb6tAP43jEar0MpwRfg.cer (raw, json)
Hash identifier: jS3eazndPhrXHvoOXRhJk4/R3SNMeD8Ka8w7JvfEvtI=
Subject key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0266D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Sep 2025 16:36:00 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 38242
AS: 133793 -- 133794
IP: 43.251.240.0/22
IP: 103.43.20.0/22
IP: 202.151.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157395 (0x266d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 22 16:36:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:ce:42:1f:04:41:cf:22:8c:a0:d8:88:5b:
ac:06:12:45:bb:65:ab:e2:73:bb:82:95:1f:02:f7:
37:71:67:60:e5:f2:c5:35:8e:01:61:3a:d9:5f:db:
c2:e2:10:9e:f4:3b:6d:80:9b:c5:cc:98:db:c6:ec:
f9:04:16:10:68:75:e6:47:7f:0f:4a:b9:42:93:0a:
e5:6b:f6:b3:56:24:fa:58:fc:de:c1:31:e9:fd:42:
24:cc:1d:d5:a9:8c:76:d0:9f:b4:8a:51:c5:bb:08:
64:74:11:25:3a:75:b9:9d:90:1a:11:d1:7b:3d:89:
f4:93:da:b5:78:25:5d:97:17:a5:fa:eb:8f:63:b2:
9a:e7:b0:6c:bb:23:9e:b4:ae:23:8c:46:b5:5a:36:
50:ab:a9:e4:c5:09:08:20:2e:13:14:fa:0a:b3:b9:
6d:dd:ce:1e:f7:61:71:ef:75:af:cf:5a:27:ce:e9:
0f:76:be:74:7b:64:37:53:f8:1b:0b:ff:1d:1f:0e:
0b:13:53:c7:c0:a7:1b:ed:a3:07:37:bd:96:d1:ea:
04:0f:2a:91:ee:15:ef:14:9a:85:f6:a6:97:51:3f:
e6:70:0c:03:1e:ff:73:cf:c7:a9:d2:07:8c:fa:1d:
97:0d:c6:70:d6:7e:49:5a:a3:fe:3d:a8:e5:9e:06:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38242
133793-133794
sbgp-ipAddrBlock: critical
IPv4:
43.251.240.0/22
103.43.20.0/22
202.151.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:ce:0e:ce:26:cc:66:b1:32:20:b7:2f:1c:a2:3b:37:08:ad:
9f:64:45:d2:69:78:4e:49:e5:63:8d:55:fc:82:b6:9d:df:3e:
bd:40:85:a7:37:17:9f:32:2e:7f:a7:97:c2:c9:2a:0d:f8:36:
d0:ec:09:1f:84:1e:03:9b:e0:5d:46:91:ec:b1:3e:73:72:f1:
8b:32:ea:3b:dd:d4:cb:93:60:5e:5c:4a:f8:e9:03:9f:a7:55:
8f:8e:e5:57:8a:39:3c:fa:11:79:34:cc:24:c2:dc:bf:44:fc:
49:ea:d9:74:28:19:9b:29:48:77:ab:6a:ed:25:e6:0e:41:b4:
62:15:3a:5e:51:59:24:95:76:92:ed:19:59:25:06:22:47:71:
3a:b4:89:a6:d1:8f:37:b4:da:a3:43:0a:c9:2a:c0:c9:45:76:
93:bb:85:b6:a6:0d:31:ea:5b:f9:f0:cf:c0:ea:9b:3b:a0:1a:
46:13:ce:e1:d8:c8:8e:9d:65:6e:1d:be:df:e5:b4:0b:10:a7:
2b:a3:ff:19:10:70:1d:27:e4:1e:85:a8:7e:e7:09:56:a5:d5:
37:16:7e:aa:90:85:a8:ab:82:c7:10:c0:4d:0a:ac:6f:1a:8b:
d4:9d:a9:27:10:ee:22:8e:03:dd:d8:da:7d:c2:88:8c:69:79:
f4:d9:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:46 2025 by rpki-client