Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
File: liwsnV7f2s79sTh-ML7D_776XNA.cer (raw, json)
Hash identifier: 0mhtM5T1nc9FHi6XreBM2BzbR5YI12yu/xyadaYKwbg=
Subject key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0265C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Sep 2025 17:34:21 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 150778
IP: 103.93.140.0/23
IP: 2402:2c20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157123 (0x265c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 17:34:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:77:53:54:14:d9:d8:6c:44:b6:7f:18:18:
1f:81:1b:4a:7a:00:2d:b5:2a:71:6a:96:ad:f7:81:
be:b8:10:98:26:24:b9:bd:a4:dc:48:bd:93:7e:5d:
f2:bf:b6:e4:a1:de:50:f3:6e:93:c6:84:37:ea:10:
2e:fa:3a:4f:db:b8:21:ac:2d:5d:ad:58:23:a8:33:
36:48:28:89:ca:bc:6b:ac:a1:d8:d1:b6:a7:c8:8d:
d3:49:4c:69:a7:56:94:cd:26:66:96:d0:fb:56:c5:
f5:f0:2b:17:e0:f8:06:be:4a:f1:65:ec:95:a6:ab:
9b:d9:9d:4d:6a:78:5e:e4:4a:cb:31:c4:7a:33:83:
78:c2:34:b7:8b:bc:8a:cd:99:79:24:bf:bf:30:0e:
9b:29:9b:85:ab:cc:f3:ed:e4:5a:45:7c:96:03:0f:
02:bb:c5:7f:4a:a6:77:6b:51:da:78:1d:e3:4b:b9:
27:4f:fe:50:19:6b:6a:0a:f0:55:6d:95:1a:4f:6b:
c6:f1:27:22:66:13:b3:4c:0e:fd:0a:56:af:fa:f7:
e7:ba:c6:5e:99:21:df:60:74:3f:aa:49:b7:d4:e2:
90:ac:59:30:44:86:7e:71:b8:3f:75:9d:13:90:9b:
d6:c2:06:85:54:2d:01:9d:a2:af:86:41:e9:29:81:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150778
sbgp-ipAddrBlock: critical
IPv4:
103.93.140.0/23
IPv6:
2402:2c20::/32
Signature Algorithm: sha256WithRSAEncryption
85:d1:41:14:1a:5e:10:12:a6:d8:e4:e9:9d:4d:ff:04:71:a3:
51:8c:94:b9:a3:00:2f:4c:ca:fc:a4:2d:3e:46:38:9a:31:db:
59:c1:6c:5e:01:2a:13:b6:f3:8d:9b:82:6f:37:bd:57:8c:de:
5f:1f:20:6f:a5:4f:4d:61:eb:95:9f:c8:0f:f7:ec:6d:74:34:
c2:dd:b2:d0:16:35:09:41:fc:e7:7f:f3:ee:83:93:a4:e8:8e:
07:05:f8:86:c5:c8:73:61:d4:03:33:b0:2a:63:70:0b:20:b5:
37:80:99:02:34:1d:49:da:7a:d8:03:59:e4:4c:8b:95:03:a6:
4c:55:ff:1e:38:cf:f7:ad:44:a4:24:d1:09:dc:51:8b:6e:8c:
57:3f:dc:f9:9d:84:68:42:7a:bf:e6:9a:23:a1:13:6a:37:e0:
5e:a4:7f:84:26:74:13:fe:72:a0:36:0d:80:d5:bc:c8:d6:f8:
cb:1c:0e:65:5f:e6:7d:b0:fb:b4:9d:68:4c:78:8d:bf:32:a0:
70:29:e7:f1:5a:b1:4a:a6:89:56:13:f1:a7:f0:00:89:18:fe:
fd:28:ea:f9:28:18:48:6b:84:ad:f9:e7:91:f4:03:10:07:4c:
ee:c2:34:e4:cb:ad:51:59:c8:9c:b7:28:23:71:e6:49:3a:44:
9e:93:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:25 2025 by rpki-client