Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer (raw, json)
Hash identifier: xrRSzLYY6QVHUXiMZKKuqsecEOiQ4vKlWIT4J3veFNo=
Subject key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D50
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 02:45:27 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 140994
IP: 103.154.154.0/23
IP: 2401:4320::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 04:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159056 (0x26d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 02:45:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:52:cb:df:a4:4e:b5:b7:a2:0f:f6:33:a8:
12:7b:64:8e:7c:9f:a5:1b:33:5e:d4:df:13:0c:6b:
79:a9:f2:7a:7a:08:ac:cc:16:5a:ba:76:3e:ce:36:
43:42:fc:0e:20:e9:0e:d8:1e:93:a5:78:c8:b9:54:
ed:b6:e2:18:64:30:d2:53:e6:76:99:33:08:ed:5e:
14:04:9f:ef:1c:64:8d:ce:4d:a9:ef:a4:99:a9:c4:
07:f5:71:f7:7a:8a:87:9f:a9:9e:17:46:2e:bf:4c:
4f:40:25:81:d0:60:51:b2:60:6c:24:99:63:51:29:
91:b9:b0:94:82:c2:62:fb:aa:91:03:26:7a:33:54:
f2:3d:9b:a0:21:75:40:fc:8c:66:04:c0:8d:66:fb:
d4:9d:40:3f:9b:cf:1a:be:06:4e:45:b5:58:ed:02:
3d:2d:4a:5a:2f:f2:74:93:14:1c:12:49:93:71:cc:
60:e1:9e:f6:e8:71:19:9f:1c:5e:47:d2:14:c1:00:
ad:80:e7:53:15:6f:a5:5d:d6:a7:07:16:10:e0:b7:
2f:f7:02:23:f8:c4:44:49:c1:46:8c:77:b7:5a:b2:
d2:8a:dc:ce:15:f3:63:3c:76:02:a3:40:1b:be:02:
5f:0f:6c:8d:92:b8:a5:87:48:7c:5e:9b:62:b9:1e:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140994
sbgp-ipAddrBlock: critical
IPv4:
103.154.154.0/23
IPv6:
2401:4320::/32
Signature Algorithm: sha256WithRSAEncryption
ce:c0:1b:92:aa:4e:57:4b:19:e8:77:5f:d8:76:b1:de:e8:32:
3d:98:04:9a:ea:fb:0f:f6:5d:28:12:de:0c:4e:80:fb:34:54:
c1:95:db:04:a9:6e:95:4a:59:08:85:58:a5:e1:8e:14:26:f4:
af:a2:e1:4f:90:0d:a6:e6:e9:e4:b3:1f:88:3f:f1:11:e4:1d:
84:89:e0:21:87:d8:d7:19:61:85:e7:7a:e6:35:6f:74:c9:10:
72:75:65:0d:a4:23:58:3c:f0:10:92:44:37:5d:87:27:7a:30:
4d:d7:44:45:6c:0c:67:bb:93:02:e9:69:f3:09:24:6c:89:f3:
4b:12:90:0f:a3:93:8c:74:67:63:06:8e:71:f1:2c:66:69:45:
66:9a:e5:b8:9e:d7:20:fc:31:d5:9d:91:9f:7c:53:95:1c:f5:
9d:e4:04:86:dc:12:5d:3a:6f:39:88:9f:7d:c6:eb:0a:6d:88:
f5:c1:19:9f:3b:c1:46:42:3c:ce:61:f1:7c:1d:85:00:5d:81:
45:d7:4d:53:ae:ce:23:70:b5:4a:72:84:35:8e:50:2b:bd:24:
67:ac:5d:fd:50:9a:46:94:b0:76:e8:e4:b7:6a:f8:b8:20:9d:
4b:9a:23:39:05:a3:86:dc:79:e3:1b:2d:dd:d5:83:70:86:3c:
69:b7:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:48 2025 by rpki-client