Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer (raw, json)
Hash identifier: bn/dMlae9FawdyFHOs4QLLHpF3Q5pnXVfr6uGHI0Lec=
Subject key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026B18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Oct 2025 19:59:22 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139013
IP: 103.100.232.0/22
IP: 2404:cec0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158488 (0x26b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 7 19:59:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:53:f1:26:be:57:c3:a9:e3:00:61:ab:4f:
92:e5:0a:6c:9d:6c:72:73:1f:fe:28:51:f8:5c:a0:
bd:0a:d2:71:03:d0:2a:35:df:f5:52:24:01:ed:3f:
58:93:1f:b0:f8:1b:2a:a0:46:e2:95:e7:19:66:4f:
6d:a9:bc:85:31:b2:48:0f:a5:dd:5c:e0:7e:02:97:
e6:07:f8:19:c6:dc:6e:6e:fc:9b:e2:be:1b:12:d7:
5b:54:29:77:dd:56:df:42:61:5a:f2:23:f4:8c:b2:
bd:7a:0c:0a:42:5f:dd:57:f3:e8:92:5f:ab:53:15:
88:78:8e:12:6b:dc:9c:7a:2c:44:59:04:6f:55:39:
b3:00:58:6e:2f:37:06:a9:8a:ba:26:c0:c3:4d:eb:
d8:fb:0f:3c:d2:40:21:54:bf:75:e9:72:c0:12:b3:
03:95:f8:2d:41:04:50:39:11:bb:be:0f:44:e9:a4:
a5:16:3f:78:cd:a3:0c:65:aa:ec:8b:ec:9c:4c:f4:
ad:f0:7d:99:a2:40:4f:2b:23:7e:8a:6c:ca:20:87:
2d:d5:59:1b:b3:5f:48:13:34:3b:ee:41:51:9f:43:
9f:f8:1e:ca:ff:6d:f9:48:4d:73:4c:61:77:f3:5c:
ad:53:f6:de:3f:dd:ec:e4:d3:76:73:63:34:1f:c7:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139013
sbgp-ipAddrBlock: critical
IPv4:
103.100.232.0/22
IPv6:
2404:cec0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:f1:54:5c:a2:b7:52:74:2e:a2:b4:db:85:17:84:c6:5a:d1:
fd:bf:7d:b7:31:38:50:7e:a5:8e:95:69:e5:8e:3f:3f:4e:ec:
33:b8:41:59:e0:f1:db:e2:f0:04:97:e4:cf:e0:70:35:79:4f:
ca:cd:94:4f:f9:fc:8e:2d:92:eb:10:55:1c:7c:7a:ec:c7:95:
62:6f:93:cf:3c:4b:f8:e0:79:f4:ea:a5:ff:bf:e3:85:61:c0:
b0:90:bf:e7:2f:df:aa:86:3f:26:af:e8:00:94:c6:4a:cb:28:
95:1d:25:f5:f7:e5:8e:17:e6:87:1c:23:f9:ec:76:21:ac:ef:
ed:dd:7b:54:51:86:dd:0f:00:aa:f5:37:c9:ba:4a:9e:3e:ad:
e6:85:2c:8d:8b:1d:00:1c:a3:d8:f7:be:18:5d:aa:7c:8d:0b:
22:be:54:99:74:fa:15:38:c1:9a:60:67:eb:8c:98:aa:ad:98:
d9:be:95:fe:19:38:e0:6e:a2:71:54:64:20:0c:7f:65:31:28:
a7:27:3d:91:0b:01:1e:2e:5a:7a:b6:7e:ab:a5:d2:42:4e:f4:
32:5d:93:0e:5f:0b:cd:d9:fb:e6:e4:aa:b5:ae:87:dd:93:ed:
80:ec:d8:a4:f5:a0:21:97:cb:e2:d1:6e:ac:39:08:d4:d0:25:
dd:fe:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:29:42 2025 by rpki-client