Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
File: WdGXNa3cboCAl6x3G0a7N1vCMOg.cer (raw, json)
Hash identifier: kKkcspmNG5aRqD4hHdIImC8RgOw2A1U4GBM+h4AJVYc=
Subject key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026937
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 17:11:15 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 132686
IP: 103.73.236.0/22
IP: 2407:6e80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158007 (0x26937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 17:11:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:50:44:e1:9f:38:7c:ff:a3:e1:b3:ec:11:
69:7b:25:dd:77:1f:5e:df:38:bd:59:f7:53:93:35:
bf:09:2b:7c:f0:23:05:eb:70:ba:58:b7:b4:1c:31:
e4:b7:67:c9:84:02:7d:94:54:a3:d6:eb:52:07:21:
36:05:a3:97:4d:75:9d:33:e2:d6:9c:c3:06:cf:3b:
cd:5d:00:4f:2c:47:b1:0f:35:55:c6:10:dc:35:54:
00:05:e0:2a:eb:44:b1:91:4e:98:c9:96:35:82:ec:
83:88:46:62:ee:0c:f1:f8:3f:df:69:99:d7:b0:74:
3c:bb:ba:4e:f2:80:eb:1d:10:ea:9a:1f:cd:2f:6c:
69:8e:f7:75:37:06:96:12:e2:cf:d8:81:46:e8:06:
3e:0c:23:94:01:55:ad:78:63:69:7f:4e:06:56:f8:
50:bf:5a:c8:da:47:1a:3c:9c:08:55:30:63:d5:8d:
b9:e1:99:40:cf:42:c7:18:da:20:a8:15:ee:85:11:
b7:1a:6d:43:d5:9c:6f:78:e2:2e:7a:7a:4f:f0:90:
e0:a4:35:36:eb:17:0e:30:c3:c5:d8:f5:aa:a1:94:
46:91:2c:15:5c:ba:89:77:19:30:ce:68:33:84:8a:
3c:46:b7:26:0d:f0:2b:d6:cb:ec:1c:ce:5e:a2:41:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132686
sbgp-ipAddrBlock: critical
IPv4:
103.73.236.0/22
IPv6:
2407:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
4c:ff:76:9c:0c:d2:36:7b:8c:f3:f5:c4:28:b5:07:40:20:69:
04:44:83:9d:e1:9f:f1:1e:16:29:82:4e:57:ed:6c:b2:32:dc:
d2:1b:89:fc:ea:fc:d2:7a:dc:aa:06:33:bd:29:1b:cb:47:6b:
5e:73:00:86:a8:7a:7d:d0:8f:88:bd:75:08:95:5d:1a:3e:9e:
10:d7:03:4d:25:96:4d:8d:b7:e9:ec:c1:51:30:63:b2:07:1d:
c6:a6:6a:e9:73:f0:a6:03:65:98:f2:9c:7e:68:27:8f:e6:45:
a4:12:2e:f8:ae:8a:69:4d:d2:04:13:00:1d:1f:b0:f8:36:94:
24:28:de:4d:c8:f2:ae:3e:66:a3:1e:5a:32:37:0d:bf:45:f4:
4e:3a:96:e3:c2:31:78:e3:6c:35:8b:39:45:1f:61:da:55:44:
3e:03:d9:a7:5d:38:9b:06:bd:2a:04:5d:4e:09:84:e2:0f:5e:
5f:7c:a3:6c:94:1b:77:b1:37:c2:ed:f2:19:54:da:f2:68:55:
50:34:d2:12:68:84:10:0d:ad:a3:40:53:18:46:47:21:78:a6:
f8:74:47:c8:48:88:fb:92:3e:ad:f2:24:79:5a:23:c6:b1:2a:
21:84:f8:58:cd:6a:b4:08:90:a3:8c:60:a2:25:95:6f:d3:e3:
af:de:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:52 2025 by rpki-client