Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
File: PLw5Tr9aIgmw6yx0fD_wBratGds.cer (raw, json)
Hash identifier: 2attJz7Zi97Z+b5G+HGh3EokD/xn82mEAx/tbwG8KWg=
Subject key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D4A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Sep 2026 13:45:00 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 151621
IP: 103.239.42.0/23
IP: 2001:df2:b4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185513 (0x2d4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 13:45:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:79:39:5c:0c:35:12:90:27:ae:a1:e9:79:
1d:c4:49:92:6a:fc:ed:37:00:2a:66:93:2e:3f:77:
d7:6a:fd:59:61:88:35:f6:53:56:06:63:95:68:01:
85:a4:45:ef:80:70:8b:1b:26:88:5d:e8:e5:5d:55:
2d:67:6d:0a:bc:8c:c9:3f:92:21:8e:f5:c8:3c:fa:
1a:75:49:57:db:37:60:2d:c8:5a:df:0d:37:63:46:
a1:60:4a:de:2c:7e:62:ba:f9:06:60:9b:32:5a:73:
b9:d9:78:05:c5:7d:8b:e0:fb:fb:95:93:b6:95:1f:
3e:ec:02:02:a9:0e:af:6f:5d:e4:d3:8c:e2:6f:9c:
b5:c0:8e:14:63:fe:f8:6d:80:bb:a4:3c:08:06:68:
f2:9d:b2:fa:a2:11:30:d8:06:d9:65:72:ee:fa:c4:
cc:da:28:f7:3f:b5:54:56:d0:93:19:eb:f4:60:ff:
3c:70:1f:16:bb:b9:89:c0:ff:57:4a:cd:9b:ec:35:
3e:ee:91:0d:c9:6e:d0:1f:07:7a:5d:13:9b:92:be:
60:83:9d:62:b6:f1:b0:09:30:f9:4b:2c:84:d7:95:
84:5d:64:42:f1:c7:5d:95:ab:36:69:07:58:82:b6:
78:62:fc:ea:5d:83:ea:49:0a:20:46:7f:a9:65:06:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151621
sbgp-ipAddrBlock: critical
IPv4:
103.239.42.0/23
IPv6:
2001:df2:b4c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:38:8a:6a:cc:3a:00:ad:d3:d4:ed:e7:91:85:c0:25:61:75:
1c:f3:fe:09:dc:5a:2a:3e:d7:10:fe:35:43:25:1f:0c:32:d1:
a7:52:00:95:32:0e:ee:02:56:79:bd:d0:1f:8f:5a:5d:3f:86:
47:9e:35:a7:1c:d6:4b:4e:cb:b5:7f:d8:0c:6d:94:d5:b4:5f:
23:a3:10:dc:ac:80:88:4f:4c:95:6b:39:42:2c:22:35:7f:8b:
e7:84:49:97:a1:0c:1f:a5:95:0a:b7:32:15:4c:bb:d2:bf:13:
07:1c:32:35:0d:8f:7c:b9:79:a2:35:85:71:22:8f:f8:b8:f2:
f5:fd:55:cf:0a:a6:a8:6a:07:ae:4a:f5:29:95:6f:91:2c:8d:
9a:ed:61:77:4f:a5:d6:64:e1:e2:40:fb:eb:c2:1e:58:6e:7f:
83:fb:fc:ee:3c:3d:b0:fd:ef:7b:31:e1:e7:4e:3d:b7:71:19:
d2:f5:cc:bd:8b:33:58:2c:48:d4:93:9e:e9:d8:e6:26:83:be:
4d:ed:bb:c2:2b:39:d2:6c:11:cf:06:48:5d:ae:93:ac:ab:ad:
3f:41:05:6d:47:bd:3a:d0:3a:6f:f6:3b:36:44:eb:97:3e:b8:
0e:68:c0:fb:06:c6:0e:c3:7d:5f:62:0a:f7:f8:86:99:e1:3f:
97:ae:6c:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:51 2026 by rpki-client