Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
File: QGGGPd9D57OxiePJwyF7wSuzXyE.cer (raw, json)
Hash identifier: FuGjMtEiHW67ucd0yuCo+datIKlvazwYkiUWjw06Dr4=
Subject key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026BF1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Oct 2025 21:09:56 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 38892
AS: 137562
IP: 103.110.142.0/23
IP: 203.19.2.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158705 (0x26bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 21:09:56 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:48:a8:f3:b2:fb:be:57:c9:b0:0c:cc:df:
cb:6a:24:fa:ee:c9:10:06:31:64:ab:8f:aa:b7:4c:
ef:dd:f3:b0:cf:1b:0b:5b:30:ca:94:f9:31:a0:42:
bf:75:b1:bb:71:87:1f:7c:85:21:97:64:01:f7:0d:
e7:5e:5b:24:2a:a0:bc:dd:d3:62:86:03:f3:a0:c6:
1d:1c:b4:5f:da:db:85:3b:f8:af:85:ad:dc:2e:21:
5b:ad:cb:db:88:c2:9f:d7:de:f2:98:f5:eb:10:28:
73:71:cb:50:7e:12:aa:a3:6f:79:44:ac:5d:db:84:
ff:c7:f5:e2:d1:06:1b:0f:be:d0:cc:2b:86:d0:a3:
6b:04:8e:19:02:a3:6f:8f:6a:b5:07:a3:5e:47:fd:
f2:b5:45:68:c6:f5:f6:7f:58:b1:f7:90:d2:41:99:
f6:6e:df:99:db:5c:66:90:4d:d6:5e:40:0b:fc:c6:
41:e6:1d:4d:b0:8f:30:c1:df:d0:b5:4b:51:fa:d2:
44:9b:e3:5f:59:e3:d4:b5:3e:e7:7c:00:61:83:b9:
43:13:5a:c2:f7:52:db:bd:cc:bc:4f:c9:42:05:00:
e0:32:3d:ae:3e:9a:0d:69:33:65:d0:9b:7b:81:b4:
e8:2e:58:69:80:b1:c9:ca:0e:3c:08:af:33:aa:8e:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38892
137562
sbgp-ipAddrBlock: critical
IPv4:
103.110.142.0/23
203.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
64:db:aa:23:54:2e:1c:9f:57:02:7b:3b:c4:fe:5d:1f:79:fc:
31:45:bc:87:84:41:98:fa:d0:38:9f:76:a9:03:15:b2:c5:53:
0d:14:33:da:ef:ab:98:1a:fb:57:35:e1:59:b9:ed:c8:d6:63:
06:1a:f4:67:70:4e:98:72:d1:15:c3:26:ec:c9:2d:f5:08:ab:
14:da:59:38:22:3d:92:4e:f8:37:26:2f:ec:ad:8f:fb:ce:97:
0d:37:a1:a5:5d:32:ff:5e:e0:14:55:e2:3d:ad:a7:b1:a4:f6:
8c:4b:9d:6d:ea:a8:bf:1c:ae:f3:e5:b3:bf:ad:e8:1f:67:ae:
03:3b:f3:9b:35:05:7a:5e:7a:12:e2:d9:68:0d:1b:ff:1b:8b:
22:8e:34:8f:e5:bc:dc:ff:47:12:66:23:9e:a2:9e:52:7a:3e:
a6:46:a9:bb:5f:99:0c:14:da:fb:c2:7f:96:c5:e9:fc:36:e1:
33:22:a6:8d:77:ee:60:70:81:25:d4:32:f9:b0:c7:83:e4:bd:
ed:36:0e:07:db:62:79:2a:27:28:a6:f7:f5:6a:b4:fc:31:c5:
35:c0:74:3c:73:72:e5:a7:da:53:d9:a2:c2:34:a4:51:1e:4e:
2f:44:81:08:2a:ba:8a:41:d4:3f:ab:21:6f:64:ed:4b:e8:6e:
17:c7:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:03:47 2025 by rpki-client