Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.cer (raw, json)
Hash identifier: GB2yDFDEm6OlwgLKiThd6nnyavBBZwRRR+i8KmPuTO8=
Subject key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026281
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 13:57:55 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.14.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 05:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156289 (0x26281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 13:57:55 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:98:4c:95:c6:ea:dc:b8:c7:b5:3a:b6:b1:
f6:11:50:bd:69:90:1f:db:50:58:53:49:55:37:3e:
ca:77:bd:9b:86:3a:fd:32:d5:78:41:54:17:66:63:
69:8a:52:04:22:37:b4:ba:a5:a5:36:29:a7:cf:9c:
58:41:68:a4:7f:54:e8:b8:2e:f4:2a:d5:e4:f3:f1:
8b:f1:ba:80:4a:b7:9b:1d:d3:d2:ab:02:1e:0a:1d:
9c:d6:6e:66:e6:e2:83:48:33:1f:bd:2f:9e:67:d4:
90:39:d9:dc:31:e3:60:c5:08:7d:c3:76:46:e1:05:
96:12:7d:4f:1f:79:fc:b2:1a:4e:7f:98:97:2f:29:
57:08:d2:5a:60:09:7a:16:57:9c:7b:27:be:73:32:
19:f1:80:38:4a:17:84:87:76:c0:50:03:38:a7:f8:
51:eb:3d:43:98:46:d3:2a:39:00:58:9d:f9:c7:86:
6c:dc:b2:04:05:87:32:fa:96:9e:66:a3:08:30:a4:
b9:e7:63:24:60:c0:7c:f7:67:3f:d0:9c:28:c5:c9:
23:78:bb:60:b1:57:01:88:b2:9f:53:fd:d4:54:66:
ef:f9:e8:12:23:63:25:6b:9a:95:16:0a:25:ab:2c:
ec:9e:57:73:09:19:4d:08:e0:3f:aa:c1:f8:b8:1b:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
60:17:8f:79:91:10:da:79:5d:a8:19:60:f9:ab:01:0c:f8:1c:
14:0e:49:fb:cd:37:c2:2b:b6:cd:64:c9:9a:59:32:f5:47:1f:
21:34:25:f2:97:dc:5c:fc:52:07:e6:12:d6:a3:3e:7a:2b:31:
cd:d4:07:30:e1:f2:66:82:09:7f:1e:81:27:fc:5d:b0:43:3c:
f4:78:64:fe:56:43:7d:10:9a:73:cf:fc:88:7c:f7:27:f7:db:
83:2b:16:07:2e:35:82:28:8c:4c:2b:36:f3:18:81:f4:7e:b5:
b4:8e:af:31:72:2e:95:1d:60:78:20:90:1d:cd:60:4e:cf:48:
0d:74:de:f3:a9:a3:99:f4:d7:d7:1d:ff:55:c6:b5:b0:93:80:
72:ef:9f:1b:59:76:93:6f:65:a3:85:46:9d:5b:06:d8:d2:37:
d2:93:c8:7a:e2:f9:67:ac:b5:43:6f:64:ec:fb:a1:be:3a:51:
f7:43:73:7b:60:f4:33:bb:27:13:84:b7:10:4a:e4:58:85:21:
45:26:6d:17:68:79:1e:95:3b:14:3b:54:68:98:ee:a6:b9:f8:
c7:2f:25:c1:d8:57:14:b4:8e:99:04:64:b8:7b:93:e6:23:8e:
dc:83:e6:76:40:00:01:6d:9f:f5:cc:22:06:e0:e5:75:d2:76:
b5:82:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:31 2025 by rpki-client