Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
File: -XxrnwabbALLPY6tWvc-UGwIyjg.cer (raw, json)
Hash identifier: 18bnSw6Nahaaoa7z83HC8rJN9O/AGqM4n05aCzkzK+g=
Subject key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02709E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Oct 2025 15:47:59 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 141210
IP: 103.173.188.0/23
IP: 2001:df7:a780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159902 (0x2709e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 15:47:59 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:eb:9e:5c:3e:dc:48:00:76:d6:4e:e4:24:
98:6d:c3:57:17:fa:35:91:a2:f5:ff:72:57:22:41:
53:36:6e:21:ef:83:15:7d:fe:6f:80:91:71:b5:5c:
98:29:72:ce:c6:3e:3f:7c:25:2c:a7:42:7d:83:0d:
1e:65:71:47:d3:9a:8a:25:7b:58:58:e6:07:8f:58:
13:55:6e:f0:14:e8:4b:68:0f:2a:73:ce:6a:37:aa:
fa:53:f1:dd:f4:c3:93:e0:a4:78:98:28:7e:ed:e9:
00:8a:33:9e:c3:2c:06:10:8e:3f:a5:09:8b:63:7e:
55:1b:d1:2b:70:ff:31:58:58:18:bd:a3:9c:5f:75:
c3:db:37:b0:99:b6:1d:d2:d4:5a:ec:e2:9f:06:b1:
5e:65:dd:80:cb:09:76:7e:0a:bc:44:61:07:71:8a:
f2:68:0e:eb:03:6b:91:16:a1:2a:c3:f6:2d:6f:c3:
a3:fa:e4:90:17:6e:4b:ee:d2:3b:c7:1f:4e:24:ab:
c3:c2:3a:a2:ab:78:4e:50:b4:af:7e:e5:ba:a8:e1:
dd:77:bc:7a:1a:20:b3:b2:92:cc:38:85:64:11:4e:
d0:de:49:0c:c7:62:81:36:3f:44:03:f9:b6:9c:07:
66:4e:3e:fa:8d:89:d6:63:1f:18:bf:04:eb:28:1c:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141210
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
IPv6:
2001:df7:a780::/48
Signature Algorithm: sha256WithRSAEncryption
d5:dd:a0:02:bb:0a:b2:d9:4f:3d:c4:d1:32:5a:56:2c:ec:5c:
aa:6e:70:51:62:b3:51:0e:c4:5e:1e:fa:99:a4:2e:e6:fc:27:
24:60:8e:a4:8d:ff:e7:cb:91:c0:43:b8:72:66:42:01:f4:ee:
35:01:ee:8e:fd:cd:f7:56:9d:c5:11:4e:c6:3e:51:c5:7f:14:
05:d8:7c:a2:87:eb:76:90:50:51:a6:87:b0:99:f8:02:db:bc:
0c:e4:31:f4:9e:76:6f:4f:b6:49:b1:91:49:de:ac:a9:73:77:
a4:8b:a0:17:9b:1f:88:11:fc:a0:b0:ac:d6:ad:91:e7:67:df:
57:84:46:d5:be:e1:e6:22:8f:5f:6f:1a:67:84:23:a9:37:e7:
b8:f5:2d:57:b8:07:49:85:ab:d0:df:c7:f8:5c:44:ab:9a:0e:
fe:5c:1b:b6:15:c2:ec:14:f1:bc:da:e4:56:13:6d:49:f7:ea:
e1:0f:a7:cc:f9:52:b2:a2:34:5d:e5:91:02:1b:64:d4:5e:53:
a0:a4:3f:3e:71:fb:63:f6:28:30:fb:dc:63:66:1c:59:8e:c5:
34:5e:ca:ff:0e:bf:62:7d:bd:63:98:bb:5c:11:36:37:0c:10:
6b:19:ad:7d:97:ca:a6:d5:73:2f:c3:d4:f6:60:6f:9e:f7:ef:
b6:2b:fd:83
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAnCeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAzMDE1NDc1OVoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVB
RDVBRjczRTUwNkMwOENBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+M+ueXD7cSAB21k7kJJhtw1cX+jWRovX/clciQVM2biHvgxV9/m+AkXG1XJgp
cs7GPj98JSynQn2DDR5lcUfTmoole1hY5gePWBNVbvAU6EtoDypzzmo3qvpT8d30
w5PgpHiYKH7t6QCKM57DLAYQjj+lCYtjflUb0Stw/zFYWBi9o5xfdcPbN7CZth3S
1Frs4p8GsV5l3YDLCXZ+CrxEYQdxivJoDusDa5EWoSrD9i1vw6P65JAXbkvu0jvH
H04kq8PCOqKreE5QtK9+5bqo4d13vHoaILOyksw4hWQRTtDeSQzHYoE2P0QD+bac
B2ZOPvqNidZjHxi/BOsoHIAVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU+Xxrnwab
bALLPY6tWvc+UGwIyjgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTREQjY5L0RBODYwQ0M4NkU1QzExRUU5QzAxMzM2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndh
YmJBTExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAieaMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ628MA8EAgAC
MAkDBwAgAQ33p4AwDQYJKoZIhvcNAQELBQADggEBANXdoAK7CrLZTz3E0TJaVizs
XKpucFFis1EOxF4e+pmkLub8JyRgjqSN/+fLkcBDuHJmQgH07jUB7o79zfdWncUR
TsY+UcV/FAXYfKKH63aQUFGmh7CZ+ALbvAzkMfSedm9PtkmxkUnerKlzd6SLoBeb
H4gR/KCwrNatkedn31eERtW+4eYij19vGmeEI6k357j1LVe4B0mFq9Dfx/hcRKua
Dv5cG7YVwuwU8bza5FYTbUn36uEPp8z5UrKiNF3lkQIbZNReU6CkPz5x+2P2KDD7
3GNmHFmOxTReyv8Ov2J9vWOYu1wRNjcMEGsZrX2XyqbVcy/D1PZgb57377Yr/YM=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:31 2025 by rpki-client