Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer (raw, json)
Hash identifier: ujWJIl8d4oUOX0FIVrl4gsXOByXT/AMp1iTu5UXtDkI=
Subject key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026A4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 23:32:09 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 132491
IP: 103.73.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158282 (0x26a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 23:32:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:09:55:47:78:ba:13:d4:54:4c:9e:c7:f0:
c4:fc:e2:70:bd:15:fa:89:e6:c8:a1:eb:6a:36:7a:
80:5b:2f:c9:54:4c:fe:c8:fa:e1:08:29:9c:c4:55:
ae:95:23:27:ff:0e:e7:73:5c:a0:05:a4:47:d6:a1:
2e:6a:a3:a6:16:71:8c:00:02:1c:39:66:87:1c:fb:
d3:8a:83:64:35:ba:24:85:a4:9b:ae:a2:00:a4:e9:
54:6e:1b:ee:a4:81:a0:26:97:8d:20:86:e0:f7:36:
c0:9a:19:1f:bf:fb:c9:62:87:b5:26:cc:b0:4c:54:
7a:10:95:e8:2e:17:69:d8:60:77:e8:20:ae:d1:48:
01:fc:9f:0c:8a:04:f7:c9:7e:2f:9a:16:11:e8:ae:
1f:7f:61:f8:f1:38:a9:65:f1:ab:0a:67:aa:f3:63:
0a:e2:4c:71:39:7b:0e:8c:e1:c0:73:3c:61:75:30:
eb:cb:8b:55:fe:15:e6:47:a1:8a:7d:b5:1e:6b:8f:
e6:b5:4f:41:f0:e2:94:dc:89:5e:af:28:d4:89:2d:
67:07:f1:06:60:c6:e7:7f:94:08:2f:14:21:eb:a3:
86:cd:4e:5f:ca:56:77:97:c6:07:8a:c6:38:7d:bd:
c2:1e:0a:0d:f1:d6:a0:c8:55:18:a7:ca:b5:53:ca:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132491
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:ee:4b:5e:6f:d6:e8:8d:bb:ab:d4:af:85:22:52:6e:51:14:
1a:b1:b6:83:5a:b2:a5:44:29:0e:b2:38:ca:ba:19:9e:11:c8:
ef:5e:4a:74:a6:47:3a:41:fb:fc:65:ed:65:f7:7c:6a:12:b9:
36:fc:8c:8b:df:9d:4e:c9:85:0a:26:c6:ed:22:83:a1:62:d0:
1e:a2:af:32:af:ff:a5:cc:b3:5d:e9:de:38:5c:b6:4a:0c:cb:
0b:15:86:22:91:7f:87:00:12:cf:ad:b8:26:12:10:cc:0f:de:
59:44:57:14:03:58:73:5d:3f:c7:11:00:f4:e7:c6:20:84:28:
85:3b:18:27:a3:1c:30:8a:67:f9:43:8a:7e:48:c5:cf:46:95:
28:c1:5e:ba:76:88:4d:36:aa:29:7c:c5:b7:1d:68:5a:2c:f8:
40:9c:7d:50:d5:6f:2f:a1:d7:96:74:ae:cc:69:bb:e7:60:08:
d7:8e:6b:73:96:7e:a4:1b:b7:76:2b:61:d1:09:c8:73:b6:ca:
50:a6:a5:fd:fd:d7:70:c9:ef:ca:5f:c5:f2:5e:ae:45:cc:50:
1c:56:94:bb:35:b1:0e:ed:eb:7f:33:10:ee:8f:31:bb:39:3b:
58:07:ad:1b:70:f8:97:54:a6:f6:b0:c3:f2:f1:30:53:b8:89:
84:f4:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:23 2025 by rpki-client