Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
File: aPPOswXHv_fe-qaMB-tBwLjjcWw.cer (raw, json)
Hash identifier: LQmIgKYAVh81MHhs4m9iq3UiwcnnUdsfp4lRVpsd80Y=
Subject key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02621E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 02:21:42 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 131312
IP: 103.69.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156190 (0x2621e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 02:21:42 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:82:96:75:0a:6c:0e:37:17:58:d9:66:a0:
f9:c2:a5:1e:b5:83:a6:9c:88:c1:34:32:40:8c:0d:
23:41:52:97:46:c4:7a:b2:1d:d1:ed:6d:03:af:94:
76:ec:06:a3:5a:7f:f7:3a:9e:b1:b0:3e:9c:79:74:
d2:68:ec:73:21:0d:5b:a4:9d:75:f2:5f:e3:38:00:
13:71:78:a2:b8:cb:f4:a1:32:29:59:98:f8:1f:38:
ce:b9:a3:7c:2c:2d:77:70:98:b3:c4:67:f7:0f:91:
56:f1:11:f5:af:77:f7:a6:d3:df:74:f0:0c:c7:d7:
79:24:e2:94:74:b6:9d:10:4c:2f:8b:90:74:39:81:
62:0a:3a:9a:69:ff:6e:a2:a2:36:bc:27:3f:c9:0d:
49:23:7f:e6:de:c2:9c:b8:57:d5:c1:72:f7:84:91:
6d:49:97:66:7a:ac:e4:97:5d:4e:dd:c3:bd:a0:55:
67:f1:92:a8:52:69:1a:44:09:e3:f8:01:cc:26:2c:
dd:02:ec:db:67:85:e8:34:c9:94:9f:aa:7e:f3:31:
32:d4:1e:bd:9e:96:e7:7b:57:02:db:b6:e7:9a:1a:
34:03:ab:b2:50:a9:47:f0:09:fd:55:1e:b9:63:78:
4a:d1:39:e6:c2:94:07:be:28:d9:d1:e7:0a:4c:83:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131312
sbgp-ipAddrBlock: critical
IPv4:
103.69.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6f:77:98:f6:16:75:82:d8:a7:44:1b:bc:ff:32:b0:9c:4e:
e6:5b:aa:90:50:d5:47:19:2a:37:fd:b1:ae:3d:38:8d:9d:12:
e1:a8:d3:47:70:91:5f:84:f2:9b:3a:d8:95:8a:33:e0:0a:55:
22:13:f5:73:b3:af:5f:40:c1:fc:39:c2:e5:c9:51:da:b8:51:
29:f4:a7:49:32:4a:8f:fa:fa:c4:ad:d2:f2:d9:65:da:99:40:
82:21:4e:98:28:7c:f2:36:5c:dc:36:e0:88:c3:7f:67:28:67:
63:69:5b:90:e9:0b:0a:f8:76:25:1a:4c:fc:76:f3:dc:26:7e:
62:1a:cb:68:80:ca:2e:2e:fc:12:8d:63:13:29:c6:74:10:aa:
6a:12:a4:d9:2b:4d:40:87:55:ab:5b:b0:03:86:fa:67:74:55:
eb:3e:1f:90:c5:d6:29:9f:5e:55:c7:87:73:48:b4:c4:f7:ca:
67:23:09:05:a1:41:cb:37:5c:f4:7c:5d:49:ec:1a:ef:3e:de:
11:3f:9d:a7:f1:e3:58:d2:4a:0e:b3:55:a6:59:98:51:40:72:
2f:f8:23:38:87:0c:61:8f:8f:b1:64:72:68:f2:3b:c9:52:01:
f0:3e:97:3e:dd:8e:5c:16:dd:20:ac:a1:e3:56:35:7e:0a:d2:
67:8a:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:58 2025 by rpki-client