Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
File: psUEnf_CZCcfSnelrurkd9fu6vM.cer (raw, json)
Hash identifier: VVOY9ElGjIA0MvMGyRV4EX13r0Sg4XDL3pHksBNgXJY=
Subject key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026959
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 21:42:23 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 140583
IP: 103.152.0.0/24
IP: 103.157.17.0/24
IP: 2001:df3:7880::/48
IP: 2407:3dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158041 (0x26959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 21:42:23 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:98:b1:89:1e:ec:97:16:b7:00:c6:0b:d3:
d8:f9:88:d7:15:7f:dc:bf:ad:a4:6f:f8:ed:3e:52:
3a:94:4a:e4:68:27:f6:6d:fa:42:c7:79:ed:e1:03:
5f:a7:61:03:bc:a7:b9:55:cc:05:26:59:6f:72:77:
33:d3:57:22:c8:27:dd:a0:6e:68:e0:f2:78:8e:24:
df:b5:cb:28:6a:b2:96:fd:10:90:8c:88:28:d0:d2:
f2:c9:7d:b7:bc:45:b7:dc:31:72:0a:39:40:6e:26:
75:68:ab:94:c5:6e:16:83:c1:4f:db:5b:e3:37:b9:
df:75:72:ef:e2:cb:c0:fb:da:4d:7e:b7:01:5f:be:
b4:42:3b:44:1a:61:d8:bf:b2:59:5f:8a:8a:fd:b3:
05:27:2b:8c:b0:cc:bd:fb:9a:9c:7d:5a:84:38:78:
11:22:14:ee:7f:ee:e2:3d:4d:44:cd:25:48:de:c9:
01:63:13:c7:27:82:5f:e2:fe:92:8a:24:40:5c:01:
c4:82:72:29:81:fe:16:9e:4e:1f:bf:87:65:df:f5:
2a:52:49:8e:88:77:a4:68:05:18:af:03:6b:39:fa:
ff:60:ad:93:7d:9d:4b:3c:91:cf:c3:be:8e:be:15:
a5:26:f8:7f:54:15:50:32:86:87:3a:2b:61:73:f9:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140583
sbgp-ipAddrBlock: critical
IPv4:
103.152.0.0/24
103.157.17.0/24
IPv6:
2001:df3:7880::/48
2407:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:36:d6:b5:f0:bc:cf:e4:13:d9:b4:63:08:28:ad:74:5c:60:
80:95:ff:d0:e5:3d:77:f4:68:4f:d4:1a:f2:bb:16:3c:9e:05:
96:98:88:fe:05:67:b3:88:0c:38:e6:06:d5:9d:0c:1f:e8:23:
8a:b5:d7:65:13:58:39:ac:d6:fd:ff:b1:18:40:80:71:6c:3c:
97:23:26:48:7e:c5:cc:fd:07:86:9d:06:16:1d:81:f9:51:6f:
e8:c5:99:a8:ce:26:42:84:55:9b:96:a3:71:4e:45:b3:2b:98:
85:d9:c2:1b:45:40:7f:cb:93:07:10:82:9c:c2:97:3e:be:71:
35:38:65:65:10:59:18:5d:99:7a:a4:cd:21:a9:d5:cb:12:e4:
a6:36:55:fa:86:ef:1a:6e:1b:2a:32:0d:28:30:f9:ae:ca:9f:
bb:f7:a2:55:95:27:5f:23:4f:bc:34:66:5e:31:7e:26:ae:01:
fb:29:f9:2f:e0:84:05:3f:78:fe:fd:4c:46:b9:ca:e7:7f:e7:
98:ae:03:63:33:0c:17:18:43:13:dd:66:ff:0d:53:59:52:62:
20:a4:0f:46:c8:8f:1e:79:78:f6:22:29:33:9e:1d:0c:35:5b:
e7:2f:33:6f:26:a3:7f:ec:4e:a5:04:d4:c7:5a:3b:dd:36:b4:
cd:49:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:20 2025 by rpki-client