Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer
File: wN6dhGshfHjdZIVanteaw9JxEI4.cer (raw, json)
Hash identifier: 4cbeAyliJFVzA5MOOaQdz/y9ZkZUbfdSeOLpUx6n/mw=
Subject key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02674C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Sep 2025 15:42:28 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 142278
IP: 103.108.178.0/23
IP: 2400:a020::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157516 (0x2674c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 15:42:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A916EDC4, serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:df:ba:28:2f:32:54:d1:14:b2:b8:97:aa:
ba:2f:df:df:0d:28:9c:da:78:54:f7:86:36:2a:41:
e3:39:b3:0b:a9:ef:5c:8f:26:a9:34:97:4d:0e:11:
9a:b6:5a:fa:eb:80:ed:5a:28:21:04:a0:3b:d5:9b:
c7:5f:66:37:c2:3d:d0:0b:12:eb:93:09:43:05:06:
16:67:04:e9:42:80:2e:bf:de:f2:0f:79:a8:fd:01:
11:f3:5d:16:ee:21:4a:6e:9f:b0:cf:4c:eb:55:c2:
88:fa:dc:55:b7:05:a4:5a:66:37:af:48:35:fd:d2:
42:de:a2:7d:4b:fd:f1:d3:cd:59:31:15:a5:0c:4a:
26:8c:a0:99:5e:e7:53:6e:b4:11:1c:36:e2:27:9f:
df:79:33:28:f9:ab:6e:81:c0:61:cd:66:f5:51:73:
1d:bd:91:59:d2:c0:91:88:2c:19:bb:38:cb:a4:a5:
df:78:b4:3e:31:04:48:6b:b2:77:2d:a5:0d:d0:a7:
c1:49:0a:7c:79:b0:10:82:67:7f:ee:26:74:7d:1a:
9a:7f:a2:5e:c4:a9:ae:3c:0d:8b:07:2b:b5:71:a0:
24:2e:02:b9:94:8c:08:cf:81:0f:9e:d3:ce:66:3b:
56:e4:dd:07:bf:bf:8c:93:34:9d:18:11:0f:4c:61:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142278
sbgp-ipAddrBlock: critical
IPv4:
103.108.178.0/23
IPv6:
2400:a020::/32
Signature Algorithm: sha256WithRSAEncryption
08:65:f5:d9:ec:06:fb:89:43:7a:9f:17:26:5e:db:db:3d:22:
25:cb:5b:3d:2c:f8:40:ae:21:04:4b:71:85:cd:98:b6:54:1a:
ab:96:90:0e:b2:32:c3:60:19:4d:90:5d:77:52:56:92:02:63:
85:01:b9:af:45:3b:38:16:f0:3b:fd:95:b9:70:d9:d2:0f:16:
4d:57:83:41:7a:8e:71:d3:c5:16:fd:94:ee:01:a4:26:bf:9c:
cb:8d:8d:8c:df:23:a1:43:93:0e:81:82:97:92:0b:67:34:8f:
7b:bc:8b:15:bc:65:79:5f:63:0f:0b:05:80:14:ce:d0:24:f3:
f2:36:85:a7:ff:7d:0b:4d:7b:67:45:5c:2f:43:2c:4c:d3:bd:
c8:da:ea:02:94:01:0f:d9:b1:a1:30:71:a1:1c:3b:f0:9f:b6:
a9:9d:04:40:15:ba:b5:2c:8c:9e:52:4c:fb:a3:b0:e8:d4:83:
77:04:33:4c:c2:b5:88:4d:27:fb:3c:b2:f3:85:83:2e:7d:cd:
3a:dc:b0:e6:7d:36:c4:d0:da:25:a5:cb:ed:0e:19:45:36:cf:
30:36:6a:c2:94:d1:b6:da:2d:5f:6e:3d:59:26:08:b6:93:50:
e7:e4:cf:6a:68:7c:42:4c:21:2d:21:e5:b1:03:1b:28:60:c8:
c1:04:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:05:12 2025 by rpki-client