Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
File: kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer (raw, json)
Hash identifier: 02dLA+MijSzOgPkonIzG6w74tW75tgtbmv1iv4ogGzk=
Subject key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026789
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Sep 2025 06:24:53 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154245
IP: 45.117.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157577 (0x26789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 25 06:24:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:70:9c:ed:9b:a6:c0:c0:49:3d:2d:f1:c7:
2c:8c:d6:9f:91:4a:e9:0f:60:3d:49:3f:d9:2e:8a:
c3:b8:81:2f:22:94:a5:1d:9b:c4:19:31:82:79:82:
05:59:57:a3:f5:26:de:46:12:f1:fe:5e:14:7b:8a:
8b:7a:6c:fd:d8:ba:df:7d:92:02:3f:32:bf:42:62:
43:ed:d6:fe:79:c6:00:46:50:98:72:89:21:c9:f8:
c0:14:10:1b:da:bc:69:cc:0e:41:36:f9:c0:b9:63:
e2:15:15:1a:b5:f3:63:01:7d:95:2f:c5:04:b3:81:
d0:4c:c5:56:41:ef:dd:87:36:2a:b5:0e:c9:c4:1f:
57:f1:62:10:d9:43:68:24:9b:37:c6:aa:b3:ee:ea:
41:da:f9:1b:63:aa:01:94:d0:24:17:d1:7f:66:5b:
73:4d:b9:c4:93:a7:42:09:0e:c6:90:5f:fd:23:ab:
ee:10:84:41:f2:45:3b:ee:ee:60:96:17:c8:bb:af:
76:79:e7:83:96:af:f3:eb:65:b8:4a:c1:7c:1f:22:
11:3e:8f:a1:f4:8a:2d:9b:5b:fe:ef:6f:e1:3b:9d:
02:e6:e5:b1:ef:e0:d1:18:bb:bc:67:65:de:9d:94:
2e:2c:26:68:08:f0:0f:7e:0c:e2:52:e3:5d:e9:7a:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154245
sbgp-ipAddrBlock: critical
IPv4:
45.117.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:d0:42:8a:32:b5:c5:34:d5:20:92:11:52:52:3e:80:ce:41:
5d:62:2f:39:0d:e0:e3:0f:86:e8:db:3f:15:94:2c:f5:71:15:
9e:c3:05:e1:e4:b6:d6:b1:51:56:1e:72:5f:f1:cb:53:9b:15:
3e:07:af:58:69:8c:f5:94:79:0f:58:ba:ff:de:e0:8c:a5:3f:
7e:41:43:77:1e:fc:7a:53:a4:fc:81:27:61:33:af:62:28:6a:
03:67:21:f7:8c:72:82:ad:ee:83:55:24:59:d6:40:33:ee:59:
c1:bf:ff:da:61:81:40:4d:db:a7:ec:8d:45:a2:c1:80:be:08:
1f:83:5b:b2:8f:fe:d6:26:d3:17:94:1d:2e:b4:f5:4b:d2:1d:
be:b3:93:e3:a5:04:94:ce:ac:51:8d:33:a5:cb:fc:f3:04:b4:
87:e2:01:48:fd:31:75:6b:fb:d3:42:ff:2a:2d:97:58:e6:b2:
90:9f:ae:db:ac:45:25:3e:48:b5:f7:ec:e3:42:5b:03:1e:42:
f0:21:7c:a9:34:ec:08:e0:8b:25:86:49:96:43:f6:1a:f9:04:
00:2f:61:7d:ad:6e:99:12:b5:d2:2a:ce:51:b6:75:18:23:00:
c7:9b:95:85:15:e8:b8:ed:f5:04:d5:b4:aa:5d:00:8e:73:47:
2c:fc:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:09 2025 by rpki-client