Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer (raw, json)
Hash identifier: SuwLpdmMRW/XehG5B0aBORK79ZZIr+3lnUED7xZghEU=
Subject key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026916
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 13:12:04 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.253.28.0/22
IP: 2001:df7:5000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157974 (0x26916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 13:12:04 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:a5:14:83:65:04:0f:82:85:52:d2:15:56:
53:a3:09:d7:d6:5a:b8:40:c3:20:45:10:60:66:0a:
95:17:03:6f:86:28:09:7c:c0:8b:90:6a:26:5c:ac:
d2:ee:fa:24:84:a3:5d:b5:ff:35:e3:6c:b6:cb:99:
f1:d2:aa:74:fa:39:15:25:9d:4b:db:60:14:ed:f3:
89:8c:6b:41:c3:32:9b:b2:8c:c1:1e:76:68:7b:36:
be:2d:d3:91:f0:c4:a6:ee:6d:ca:14:bd:a1:c4:e3:
ed:0e:76:65:66:9d:c6:31:2c:4a:ca:79:8f:85:0b:
36:9d:c7:ed:02:3c:61:15:dc:37:c8:cf:92:37:b1:
4e:f9:61:a1:9f:a4:00:03:27:08:41:75:13:0c:13:
d3:82:9e:dd:28:65:10:77:d9:92:0c:ef:a7:b7:e4:
ff:48:71:23:d3:72:8a:0c:c4:e2:dc:d9:a8:18:a0:
a2:a3:9a:bb:f5:52:73:5c:70:30:ba:a3:36:ee:7c:
39:f6:b5:0e:fa:bb:14:df:8b:d8:55:3c:b8:a5:4c:
79:bc:6d:71:b5:54:ea:c7:73:cd:34:d1:78:2b:ba:
3c:0b:c4:28:b2:f5:14:cb:68:7a:c2:da:e2:53:fd:
72:a2:fd:34:15:08:5d:b1:82:84:23:04:76:74:dd:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.28.0/22
IPv6:
2001:df7:5000::/48
Signature Algorithm: sha256WithRSAEncryption
0e:13:b6:5d:a7:e7:54:02:ff:3a:d5:ca:51:4e:70:fd:d4:28:
f7:1e:a2:6e:0d:1b:4f:9f:34:11:90:23:3c:39:cf:51:32:85:
34:2b:c9:89:23:41:a4:a8:1c:23:c1:45:7e:16:8a:7b:41:bd:
2b:51:ab:b8:fa:d4:d9:d5:5c:fd:42:5b:af:fe:94:bf:ab:e6:
17:e9:17:d6:cb:2d:53:f5:5e:69:dd:84:c6:3e:01:d6:39:04:
62:c8:60:c1:8b:53:b3:1b:d9:37:95:81:3d:f7:ed:c5:c9:36:
9c:36:fd:cd:21:9d:79:c9:22:2f:24:d9:76:1a:3b:2c:16:04:
10:ac:7d:df:22:b7:44:42:5e:8c:dd:43:a4:65:5d:07:50:77:
f2:33:44:56:e0:48:a9:cc:b0:89:92:56:5c:b8:8e:54:b3:71:
b3:68:3b:6f:85:a5:27:43:49:97:30:8f:b0:3f:ff:cd:57:15:
e5:a8:51:a6:e6:a4:eb:b2:a5:78:8c:c6:ec:3c:30:84:a6:81:
ee:c4:28:f3:7b:55:dd:39:5c:d7:4d:8a:d1:fe:d7:f8:80:27:
12:4e:ca:6a:b4:76:ab:0b:4b:78:ae:b2:e2:37:ba:01:9a:c9:
a4:f1:c1:99:e8:01:c2:3d:dc:e4:0d:e3:99:33:24:11:f0:60:
0d:00:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:05 2025 by rpki-client