Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
File: 9-88h0KVuB-hDxQP61W8nFzt-dk.cer (raw, json)
Hash identifier: xGJb076hBRTzYsDaGdbmVDsvig5179cqAubkIqSpZyc=
Subject key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027017
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 09:04:46 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136921
IP: 103.99.43.0/24
IP: 2001:df2:4b00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159767 (0x27017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 29 09:04:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:01:72:b2:ea:1f:c9:22:56:de:51:32:c8:
59:ec:f6:b7:56:75:34:5c:98:51:44:24:0d:69:c5:
d8:81:7d:39:7c:82:e1:eb:52:95:b9:08:fe:25:73:
40:2d:07:76:c0:fb:fa:22:da:39:f0:45:68:78:12:
c1:fb:b1:3b:a8:68:34:b3:8e:d0:c1:f6:55:82:77:
1d:74:f2:b4:f6:7e:bd:ec:ec:ab:5d:a3:92:f5:1a:
28:36:c2:6d:ce:d9:a6:2a:f4:31:b9:93:f9:4e:2e:
c0:7a:ac:db:c9:b0:8d:29:46:e6:95:8f:0d:4e:b1:
a8:82:89:9f:54:2a:e7:6f:05:ae:d5:c7:1a:bf:66:
f3:f9:f3:86:ba:53:d9:d6:24:9f:c1:3e:92:50:d7:
10:3b:bc:3b:22:55:9d:2c:b4:54:0f:2c:9b:42:1c:
6e:ba:f0:6b:a4:77:5a:3a:c6:7e:14:d1:07:d9:c3:
66:c0:f0:8a:5a:22:8a:b2:bd:9d:9f:bf:b3:02:6f:
fe:07:5f:0b:f1:02:49:72:23:86:3f:69:92:86:38:
b6:36:c9:a9:bf:86:28:14:35:87:de:13:31:26:26:
10:00:29:2c:e3:a8:a4:3c:27:bf:2b:9d:19:8e:73:
21:95:a6:13:88:3e:d0:ef:7a:ad:89:5a:55:02:d0:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136921
sbgp-ipAddrBlock: critical
IPv4:
103.99.43.0/24
IPv6:
2001:df2:4b00::/48
Signature Algorithm: sha256WithRSAEncryption
d1:22:0c:de:d4:c8:50:c5:2c:4e:43:95:a9:03:ad:ed:0d:05:
a7:49:5e:21:b8:f9:fb:3a:21:57:65:f6:29:46:46:2f:a9:96:
a2:43:0d:57:0e:4a:78:0d:3a:21:7a:c7:9b:f0:a8:4e:4e:ec:
23:23:91:3f:70:3b:47:99:8b:8f:8b:9f:e7:3f:cf:72:18:c3:
bc:1b:af:b7:86:3b:b2:12:e1:6e:4f:94:3f:08:4f:4a:35:40:
11:e6:08:ce:49:a4:ac:ce:da:39:9f:16:b2:cf:58:27:48:48:
27:76:e6:74:45:0c:e7:a6:3a:b5:77:d4:bc:05:b9:a6:d2:d9:
e0:9a:96:75:12:bb:99:42:36:fd:f1:ca:a3:48:04:8f:2b:ec:
05:84:aa:00:ab:fa:a0:cd:3c:a6:53:e4:c0:49:5b:f3:6e:54:
c0:6a:91:32:d6:94:ec:48:d9:2b:01:23:6d:88:cd:57:fc:66:
85:2c:82:19:88:52:c0:6b:78:7e:53:a1:26:80:d7:bd:fa:34:
ce:1e:80:52:9f:9d:00:9b:97:50:2b:ef:df:97:9b:f0:29:a3:
ba:c0:27:11:75:5d:60:7b:0e:9d:35:67:a3:70:d6:1c:38:0f:
a3:50:16:1f:64:23:56:bb:da:3c:c6:e5:39:ef:24:31:fa:ac:
6f:f1:85:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:46 2025 by rpki-client