Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
File: wsFz12JIhbwL1vwZPvvO6VQ_okM.cer (raw, json)
Hash identifier: HJAB8M9JKCHvfA3MqnkIJ+MeDc7qL7BH6ow2f0de6/o=
Subject key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D94
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 21:32:58 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136976
IP: 103.122.103.0/24
IP: 2001:df6:ad00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159124 (0x26d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 21:32:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:90:bb:9c:3d:c8:e4:13:c4:28:a4:2e:9b:
60:5f:ce:1d:af:78:d1:5d:c4:e0:61:3e:b0:4c:2f:
68:f7:d2:eb:69:bd:7f:3a:7d:3b:3b:8e:b2:48:d3:
19:46:33:0c:ca:94:96:98:23:2f:30:04:81:f2:9d:
79:72:b9:1a:f5:4b:bc:c5:40:a8:33:8d:71:de:fc:
cc:68:b9:de:58:73:94:6a:73:98:7e:4e:1d:b1:99:
63:19:6b:85:5d:62:b2:d7:53:fb:9e:bb:a9:2c:e4:
df:95:10:cb:60:57:4f:15:26:a8:75:74:6a:a1:d2:
d1:c2:de:a3:c2:fe:cf:7a:89:8c:e2:13:83:8d:a6:
26:ae:6c:e4:8f:cf:63:09:15:86:d0:24:bd:70:5c:
ca:60:e8:d9:c1:16:c3:19:a2:e6:d5:10:a4:07:82:
b9:22:63:6a:39:64:f0:2d:2b:53:3b:cc:f9:fb:f5:
2c:5a:4c:c4:bb:c1:2e:dc:59:82:d6:77:d6:81:cb:
ba:74:3e:e7:0c:1f:97:e0:ee:0e:29:c9:bd:a0:3f:
7c:0a:28:7e:88:8b:ae:b0:6a:30:4b:21:7b:2e:8d:
12:17:fb:dc:f0:0f:c0:2d:ac:d9:61:82:66:01:ce:
e2:a1:97:06:e2:bb:22:11:da:9f:55:b6:d2:57:c2:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136976
sbgp-ipAddrBlock: critical
IPv4:
103.122.103.0/24
IPv6:
2001:df6:ad00::/48
Signature Algorithm: sha256WithRSAEncryption
30:eb:c5:3a:6b:d7:1c:6b:e1:20:83:b4:c2:a6:1b:b6:de:3c:
e0:11:e8:d0:f9:00:e1:06:ec:d5:65:68:90:9b:85:ea:10:9d:
2b:a0:fe:95:6a:fe:4d:67:df:da:99:42:87:36:8d:a5:91:f9:
e5:fd:fe:20:08:f5:00:ee:f9:34:61:4a:1c:d5:3b:e0:3e:e4:
db:e2:58:9f:97:be:83:7c:49:27:d2:75:74:29:c5:55:9c:9c:
1f:f4:f2:a8:52:a1:3a:bc:76:5a:88:f4:23:db:4f:6f:71:55:
71:0c:27:73:04:25:ae:82:bf:51:2f:be:71:ae:60:00:47:87:
f2:e3:98:f1:37:7e:1e:6b:a7:aa:a2:a0:bb:fc:a6:3a:94:42:
44:f9:6e:7f:20:c8:10:87:f7:5f:29:bb:0f:f1:69:b2:86:a5:
02:17:52:c6:b1:8d:09:b6:07:fb:44:36:e0:2e:7c:f5:89:eb:
83:ac:51:c7:51:cd:5c:c3:01:8f:cf:e6:a1:b8:35:0d:a0:dc:
70:50:77:b1:c2:cb:54:05:27:69:43:f6:a2:fc:70:53:2e:2e:
1f:48:4a:2f:23:95:c1:c1:3d:03:c2:e2:12:98:a1:bf:e8:92:
7e:c0:45:a5:07:b4:b4:66:29:25:0e:49:d7:51:f4:3f:96:19:
19:49:fb:68
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAm2UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAxNzIxMzI1OFoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzhERjExMTAvBgNVBAUTKEMyQzE3M0Q3NjI0ODg1QkMwQkQ2RkMx
OTNFRkJDRUU5NTQzRkEyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsVZC7nD3I5BPEKKQum2Bfzh2veNFdxOBhPrBML2j30utpvX86fTs7jrJI0xlG
MwzKlJaYIy8wBIHynXlyuRr1S7zFQKgzjXHe/Mxoud5Yc5Rqc5h+Th2xmWMZa4Vd
YrLXU/ueu6ks5N+VEMtgV08VJqh1dGqh0tHC3qPC/s96iYziE4ONpiaubOSPz2MJ
FYbQJL1wXMpg6NnBFsMZoubVEKQHgrkiY2o5ZPAtK1M7zPn79SxaTMS7wS7cWYLW
d9aBy7p0PucMH5fg7g4pyb2gP3wKKH6Ii66wajBLIXsujRIX+9zwD8AtrNlhgmYB
zuKhlwbiuyIR2p9VttJXwkpdAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUwsFz12JI
hbwL1vwZPvvO6VQ/okMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM4REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOERGMS9FNjE3QUQ5MkFBQ0YxMUYwQkIxMUZCNUJDNEY5QUUwMi93c0Z6MTJK
SWhid0wxdndaUHZ2TzZWUV9va00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhcQMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ3pnMA8EAgAC
MAkDBwAgAQ32rQAwDQYJKoZIhvcNAQELBQADggEBADDrxTpr1xxr4SCDtMKmG7be
POAR6ND5AOEG7NVlaJCbheoQnSug/pVq/k1n39qZQoc2jaWR+eX9/iAI9QDu+TRh
ShzVO+A+5NviWJ+XvoN8SSfSdXQpxVWcnB/08qhSoTq8dlqI9CPbT29xVXEMJ3ME
Ja6Cv1EvvnGuYABHh/LjmPE3fh5rp6qioLv8pjqUQkT5bn8gyBCH918puw/xabKG
pQIXUsaxjQm2B/tENuAufPWJ64OsUcdRzVzDAY/P5qG4NQ2g3HBQd7HCy1QFJ2lD
9qL8cFMuLh9ISi8jlcHBPQPC4hKYob/okn7ARaUHtLRmKSUOSddR9D+WGRlJ+2g=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:05 2025 by rpki-client