Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
File: PLw5Tr9aIgmw6yx0fD_wBratGds.cer (raw, json)
Hash identifier: b2dEKIV2l9rnOcRtQpHqBnFgLdvggHQf4lMYXy5zeWw=
Subject key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026188
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 31 Aug 2025 17:21:26 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 151621
IP: 103.239.42.0/23
IP: 2001:df2:b4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156040 (0x26188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 31 17:21:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:79:39:5c:0c:35:12:90:27:ae:a1:e9:79:
1d:c4:49:92:6a:fc:ed:37:00:2a:66:93:2e:3f:77:
d7:6a:fd:59:61:88:35:f6:53:56:06:63:95:68:01:
85:a4:45:ef:80:70:8b:1b:26:88:5d:e8:e5:5d:55:
2d:67:6d:0a:bc:8c:c9:3f:92:21:8e:f5:c8:3c:fa:
1a:75:49:57:db:37:60:2d:c8:5a:df:0d:37:63:46:
a1:60:4a:de:2c:7e:62:ba:f9:06:60:9b:32:5a:73:
b9:d9:78:05:c5:7d:8b:e0:fb:fb:95:93:b6:95:1f:
3e:ec:02:02:a9:0e:af:6f:5d:e4:d3:8c:e2:6f:9c:
b5:c0:8e:14:63:fe:f8:6d:80:bb:a4:3c:08:06:68:
f2:9d:b2:fa:a2:11:30:d8:06:d9:65:72:ee:fa:c4:
cc:da:28:f7:3f:b5:54:56:d0:93:19:eb:f4:60:ff:
3c:70:1f:16:bb:b9:89:c0:ff:57:4a:cd:9b:ec:35:
3e:ee:91:0d:c9:6e:d0:1f:07:7a:5d:13:9b:92:be:
60:83:9d:62:b6:f1:b0:09:30:f9:4b:2c:84:d7:95:
84:5d:64:42:f1:c7:5d:95:ab:36:69:07:58:82:b6:
78:62:fc:ea:5d:83:ea:49:0a:20:46:7f:a9:65:06:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151621
sbgp-ipAddrBlock: critical
IPv4:
103.239.42.0/23
IPv6:
2001:df2:b4c0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:f2:c3:7a:59:b6:8b:28:f5:36:ec:17:4c:04:4e:e0:37:64:
30:0a:5c:8a:23:a3:f4:c9:c1:25:cd:24:94:69:7c:99:4b:f5:
f0:3f:c8:85:90:62:53:bc:99:bd:35:c0:3a:ea:d3:ce:73:23:
80:08:ac:af:2a:6b:ee:e6:e9:d3:47:06:39:f4:be:59:62:1c:
3f:ce:54:d5:82:b1:39:df:43:07:f5:20:38:fc:81:5d:4e:8a:
dc:21:24:05:b3:60:42:88:f4:2c:c8:48:6f:0f:99:a8:89:ad:
fd:7b:80:b3:5b:ee:cb:a9:ad:9e:f3:48:89:c9:db:63:73:cc:
90:4b:3f:e0:e8:45:9e:46:84:7f:01:c3:93:52:63:01:28:95:
e6:a2:b1:2f:e1:62:eb:52:7b:3e:c0:c1:c5:d7:41:12:0f:52:
67:70:e4:5e:25:f3:12:20:50:2b:f7:e8:a2:5f:d8:c3:d6:fb:
02:4c:91:ad:67:6a:ad:8a:ff:a9:ee:9d:7e:2a:7c:4c:5e:f5:
a6:ca:71:37:d8:9a:d9:77:78:7d:26:a1:7c:9f:76:0a:48:76:
e6:ee:c0:39:0a:2a:cf:74:88:95:33:65:d0:d7:87:44:29:df:
ff:e6:84:51:ce:4b:53:a0:9a:bc:e1:bc:fb:88:dc:b2:c8:63:
7a:32:ae:96
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAmGIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgzMTE3MjEyNloXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjhFMUYxMTAvBgNVBAUTKDNDQkMzOTRFQkY1QTIyMDlCMEVCMkM3
NDdDM0ZGMDA2QjZBRDE5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO23k5XAw1EpAnrqHpeR3ESZJq/O03ACpmky4/d9dq/VlhiDX2U1YGY5VoAYWk
Re+AcIsbJohd6OVdVS1nbQq8jMk/kiGO9cg8+hp1SVfbN2AtyFrfDTdjRqFgSt4s
fmK6+QZgmzJac7nZeAXFfYvg+/uVk7aVHz7sAgKpDq9vXeTTjOJvnLXAjhRj/vht
gLukPAgGaPKdsvqiETDYBtllcu76xMzaKPc/tVRW0JMZ6/Rg/zxwHxa7uYnA/1dK
zZvsNT7ukQ3JbtAfB3pdE5uSvmCDnWK28bAJMPlLLITXlYRdZELxx12VqzZpB1iC
tnhi/Opdg+pJCiBGf6llBjsZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPLw5Tr9a
Igmw6yx0fD/wBratGdswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4RTFGLzE2OTJENDg4MjU2MjExRUU4MTIyMkUzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOEUxRi8xNjkyRDQ4ODI1NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5
YUlnbXc2eXgwZkRfd0JyYXRHZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBFMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ+8qMA8EAgAC
MAkDBwAgAQ3ytMAwDQYJKoZIhvcNAQELBQADggEBAIvyw3pZtoso9TbsF0wETuA3
ZDAKXIojo/TJwSXNJJRpfJlL9fA/yIWQYlO8mb01wDrq085zI4AIrK8qa+7m6dNH
Bjn0vlliHD/OVNWCsTnfQwf1IDj8gV1OitwhJAWzYEKI9CzISG8PmaiJrf17gLNb
7suprZ7zSInJ22NzzJBLP+DoRZ5GhH8Bw5NSYwEoleaisS/hYutSez7AwcXXQRIP
Umdw5F4l8xIgUCv36KJf2MPW+wJMka1naq2K/6nunX4qfExe9abKcTfYmtl3eH0m
oXyfdgpIdubuwDkKKs90iJUzZdDXh0Qp3//mhFHOS1OgmrzhvPuI3LLIY3oyrpY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:00:26 2025 by rpki-client