Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
File: wj3utHnnD2DvynyIRiuVudwiydA.cer (raw, json)
Hash identifier: WiEvpG02823RdKOniYX8m4L+1St8N1u5mRnC3rAEZ88=
Subject key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0260BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 08:48:36 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 139320
IP: 103.141.42.0/24
IP: 2001:df0:ed80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Oct 2025 00:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155834 (0x260ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 08:48:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:23:e5:d6:61:12:ed:4f:5c:18:bb:6e:9a:
dc:68:45:e6:04:0d:c2:dd:87:41:20:16:85:ed:82:
dd:32:38:fb:9e:63:5b:49:08:1d:87:41:d6:c0:b0:
ea:ea:6d:23:33:2f:fa:25:95:86:49:47:bf:aa:b1:
49:25:af:03:95:37:6d:11:f0:44:2e:82:16:7f:08:
cb:e2:1e:ef:7b:82:ed:9c:4d:db:79:a2:b0:70:13:
0b:eb:47:f8:02:0e:af:80:03:79:58:e0:3f:f3:a6:
bf:1e:26:09:46:79:28:a8:69:ec:45:7f:af:7a:5a:
4e:92:c3:9d:52:ef:3e:a4:ee:43:5a:e9:aa:fe:65:
0d:53:e6:23:01:2a:79:95:b2:2e:ff:e6:a5:bd:8d:
c7:ab:98:e0:a1:c1:24:15:43:22:6b:1d:b2:01:e2:
2a:51:3b:e7:0e:b5:b6:3a:66:da:2d:8b:37:eb:ab:
80:25:02:c5:a3:3c:3d:3f:61:ab:04:b6:14:b8:bd:
49:db:b4:92:83:76:cb:73:97:95:7c:76:06:65:bb:
e2:a4:0b:9b:93:e9:51:41:2a:48:04:94:09:d8:07:
e9:2a:eb:71:dd:64:5b:47:74:81:f9:7c:53:40:29:
5e:ec:d3:b6:35:24:83:be:b6:e7:e1:c4:60:e1:e0:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139320
sbgp-ipAddrBlock: critical
IPv4:
103.141.42.0/24
IPv6:
2001:df0:ed80::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b5:00:d6:9f:05:cd:00:86:b9:24:93:19:3b:a2:89:2f:a9:
19:9f:9e:af:5a:b4:4d:72:02:34:bd:53:9c:d1:05:4d:58:fd:
a5:07:6a:9b:f1:b0:d7:78:7a:4a:f2:5a:ad:3b:d8:0e:8a:6f:
d8:44:c8:67:2d:c4:f7:3f:9b:6e:d5:b7:25:aa:04:15:07:dd:
e1:cf:b7:03:f4:a4:41:df:81:1b:de:d2:4c:c7:e8:ec:1b:48:
66:53:ef:2e:79:18:f5:49:98:78:87:a4:d3:26:4a:30:44:4f:
2f:f9:bf:fc:62:19:af:6d:67:c9:d0:b7:02:cd:d6:b1:8a:af:
08:fd:bf:9d:4d:1b:64:d6:d3:47:92:98:5e:28:7a:0d:93:83:
f0:3b:58:4d:cd:58:28:ba:69:2b:19:fb:79:ea:2a:30:c3:53:
d6:61:b5:c9:8d:dd:eb:a3:a9:3f:c6:d9:20:f8:5b:94:bc:31:
34:a9:e8:da:86:19:30:22:5f:23:b5:61:ed:12:50:83:fb:40:
33:6b:bb:f2:4d:20:ca:10:e1:8d:9a:19:6c:fd:f8:87:a1:67:
78:9d:47:c3:5b:b0:a2:dd:4a:3e:95:7c:79:52:59:cc:e0:67:
8d:8d:46:41:03:55:22:13:25:b7:0a:70:f4:74:df:86:84:62:
8e:ac:a7:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:15 2025 by rpki-client