Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
File: WFcZh2wfmiD9644Ew9aTelrKpXw.cer (raw, json)
Hash identifier: wO+SRQRT29Kf/S/uXVX4G9WxXy6sEn0UHkfuWTG9Hrc=
Subject key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0267CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Sep 2025 15:08:25 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 45893
IP: 203.161.176.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157643 (0x267cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 26 15:08:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:f9:82:b7:c5:fc:d6:35:aa:88:ac:da:9b:
45:4a:48:cf:db:9c:78:a0:e7:f8:ee:80:08:8e:73:
99:8c:bf:63:33:c2:72:02:40:08:61:23:2f:34:44:
d7:32:9f:e1:3a:3a:64:6a:2e:5b:f6:5b:6b:48:69:
c7:08:21:23:00:84:1e:18:cb:72:db:b2:fb:17:b7:
98:5e:79:ac:78:93:97:80:4c:5e:94:61:be:49:90:
f8:0f:46:e6:8f:87:a1:56:36:93:b9:90:01:f1:e8:
2d:a6:99:2c:a0:4c:d1:90:f2:a4:a5:4a:c5:92:71:
ab:b2:87:df:6e:8d:bd:21:23:b7:75:dd:40:f6:b9:
1a:f9:2b:90:fe:f1:25:41:b3:e8:c9:e3:e0:e7:03:
a7:63:fa:e8:d4:f2:3f:4b:7e:a3:4b:92:42:cf:c3:
a2:8a:ef:fb:f0:32:36:1d:d2:96:5b:19:5a:31:4c:
69:75:81:28:6f:3c:86:2e:78:58:44:22:0f:69:4f:
03:db:11:03:fb:ad:4d:a1:26:03:eb:38:07:15:79:
97:be:85:a1:f8:39:39:ff:1d:48:65:49:31:47:17:
cc:bc:f3:87:78:fb:49:41:50:e7:1a:e0:6f:97:d3:
c6:6f:cb:03:cc:06:cf:76:e5:4a:2e:c2:e7:23:32:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45893
sbgp-ipAddrBlock: critical
IPv4:
203.161.176.0/23
Signature Algorithm: sha256WithRSAEncryption
72:3c:7e:fb:63:78:d0:b5:3e:07:26:98:5d:a8:e2:fd:43:84:
e2:25:46:f4:5d:0a:70:d0:ec:ea:00:45:78:e4:e8:2e:ad:5a:
97:c1:3f:68:09:96:f1:84:09:aa:8a:dd:c1:0d:3d:94:6a:04:
77:5a:16:5d:d1:ed:78:2f:e8:43:f6:ce:b5:3f:42:8d:26:ff:
14:d5:3f:b9:d2:f3:d1:46:cd:51:c8:a7:8a:24:a4:6c:cc:ee:
24:7b:21:d2:d4:6b:c5:37:b3:0d:6c:b6:72:3c:f1:c3:1e:43:
a5:a3:26:dd:e1:99:89:3f:6e:5a:42:4d:85:fc:32:e4:a2:6c:
a0:57:a2:53:75:2b:11:bc:c4:b1:43:02:c9:24:b3:9a:2e:00:
0b:83:74:a1:ee:64:ad:8a:56:06:e7:5a:b3:6e:7f:c1:7b:6d:
c3:31:58:29:9d:a6:13:73:49:c2:8f:38:f7:94:b4:9d:23:91:
ab:7c:d0:2f:ec:73:70:83:c8:6a:37:aa:59:2a:af:0e:69:d9:
ed:4a:0f:c4:1a:4c:df:cf:41:0f:7a:ac:10:34:a9:9a:c7:e8:
f2:ab:73:30:64:fc:0a:6a:cd:66:74:f2:f4:9b:30:6c:f0:c8:
04:a1:36:3b:9b:1b:38:b2:79:7f:4d:25:d0:c7:36:25:e5:97:
6c:6c:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:46 2025 by rpki-client