Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
File: o9c6Tp8QQ946v09e0Qhor20zW_Q.cer (raw, json)
Hash identifier: PC0qiVKNuOxDe5vIyzmZbp0HNyO1etAhupW45N65FMs=
Subject key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026944
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 18:48:00 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 135334
IP: 103.172.214.0/23
IP: 2001:df7:7880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158020 (0x26944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 18:48:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:7e:52:f7:a6:24:78:dd:46:52:f3:e5:af:
ca:22:74:0b:a6:41:63:dd:23:93:c3:9b:38:97:97:
0b:bc:69:96:dc:c2:f0:42:0a:2a:0c:8f:65:a6:e3:
e2:83:d2:52:13:91:1d:e7:04:2b:a0:9f:24:63:89:
d8:99:10:c3:21:b2:46:11:d7:f1:fb:ae:33:21:0d:
28:cf:78:55:0d:63:fc:b0:ca:43:40:97:38:a7:29:
1f:f1:54:3d:b2:87:01:ac:5d:37:42:5b:58:d7:9f:
82:f8:86:ef:37:95:c5:21:75:79:04:59:66:88:35:
d0:4e:77:34:6c:cd:33:d0:67:d2:00:f6:1c:e5:6b:
64:c2:1c:3d:33:b3:da:b0:35:53:5b:01:bf:7f:d3:
5f:fe:7b:5d:c9:68:62:4c:2d:79:1d:0c:56:c9:cd:
b8:09:26:f3:6b:fb:a7:2b:b4:ff:d8:93:c9:3e:d6:
e2:d5:5b:df:14:db:cc:58:8a:5e:ae:d2:70:7f:fa:
81:5b:39:44:39:d6:11:b2:9f:b0:2c:43:e3:02:76:
02:89:bc:b1:78:c6:4b:51:96:56:24:31:a4:e8:a7:
37:74:d8:84:1b:38:8a:86:6c:74:55:ad:51:20:38:
f4:85:e0:92:42:f0:41:f3:17:6c:65:8c:f2:ba:c9:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135334
sbgp-ipAddrBlock: critical
IPv4:
103.172.214.0/23
IPv6:
2001:df7:7880::/48
Signature Algorithm: sha256WithRSAEncryption
05:12:30:5e:da:a9:7f:b0:35:b8:83:c5:d3:03:07:a0:b5:91:
af:16:52:f7:5e:ab:26:b5:46:f1:c6:d9:3c:c2:60:25:23:03:
9f:a4:49:91:6b:b1:16:66:bd:66:84:8c:46:5b:3f:1b:08:89:
45:52:06:03:ab:2d:9b:b9:e9:91:19:1f:ef:63:50:ce:67:13:
6e:44:fb:1b:70:05:ad:95:6f:77:23:95:2f:a8:f2:a7:f8:e7:
9d:95:89:f0:9e:25:f3:e6:95:20:49:79:f0:5e:48:a4:57:fb:
0e:ac:f2:91:3d:fb:cc:c6:23:eb:e6:0a:91:97:8f:25:49:94:
de:f0:90:05:be:2b:d3:f9:82:33:c1:53:00:93:2a:a2:3c:60:
94:25:c9:aa:0c:fd:90:54:7d:0e:c8:dd:cf:d1:10:fa:d5:ae:
94:99:a5:92:a4:70:50:a0:60:6d:1d:4e:54:19:c1:e2:d0:64:
33:22:12:d2:95:78:c9:8c:68:0f:bb:12:16:53:e3:78:71:f0:
f0:0b:f9:d6:88:c7:26:b8:fc:28:7c:c7:14:8e:2e:a3:1a:34:
40:1f:0b:cd:30:87:1a:70:84:92:cc:6f:34:10:28:90:f1:51:
23:c6:28:09:f0:0a:5e:aa:67:94:5a:06:c4:9c:1d:50:f9:3d:
28:a7:71:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:04:19 2025 by rpki-client