Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer
File: 9jxGQikStFqRhuRFxanep7ujQos.cer (raw, json)
Hash identifier: Xh8KtYMqEF4PEogwfY2DmswYSYykTisKsHOhxS6chi4=
Subject key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0272B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Nov 2025 02:14:52 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136160
IP: 43.251.100.0/22
IP: 103.82.52.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160439 (0x272b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 02:14:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:0b:86:c7:87:5d:23:16:0f:35:9f:f1:dc:
72:2f:5a:3d:f5:16:7c:37:0e:5b:97:2c:df:e4:fe:
0c:8d:bc:c8:53:38:d5:c0:e2:0b:ac:f3:43:45:7a:
eb:25:cb:37:11:71:82:9c:1b:e1:43:ac:b4:d8:1f:
af:7f:5c:c2:88:65:92:d6:bc:28:a7:66:95:4c:10:
ca:1e:94:c2:7f:11:30:52:bd:fe:37:12:92:38:fb:
7c:8f:98:bd:c2:49:82:41:4e:92:d9:80:46:e7:cc:
b3:b3:77:17:c2:1a:e3:a7:a2:9c:84:bc:ec:83:d3:
f2:f4:c6:3c:4d:d0:18:12:70:08:1e:69:53:84:bb:
33:e9:fa:10:ec:84:46:52:1a:d4:f1:e6:46:b1:db:
c1:c5:4b:ec:7a:75:b3:9e:5c:b1:e1:66:c8:94:e3:
d9:49:94:4c:62:3c:b8:dc:7a:ac:e5:34:3c:57:94:
cb:7c:06:24:7d:50:07:65:f2:fb:2e:cd:ce:c1:b8:
0b:dd:21:a9:73:f2:56:7f:e5:93:a1:25:02:36:30:
1c:f8:d2:7f:29:1b:fd:2a:36:08:f4:99:b3:f2:dd:
f5:37:e9:e0:db:a1:68:8a:fc:ab:83:cd:9a:8c:5f:
a6:3e:c3:0c:8d:ab:d5:58:58:42:20:b2:bc:88:af:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136160
sbgp-ipAddrBlock: critical
IPv4:
43.251.100.0/22
103.82.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:8f:44:a0:46:0b:a6:5d:f8:24:c2:3b:38:6e:8f:a9:69:ee:
91:27:6b:16:8b:36:c6:41:35:60:aa:db:ce:d6:41:0d:bf:64:
dc:f0:f9:73:0d:b1:a9:b1:51:71:05:57:e0:2d:d7:f1:0a:85:
7f:1c:61:e3:b5:c4:4d:f8:30:f5:23:69:40:32:fe:09:af:aa:
06:a8:f7:f4:1b:af:48:45:23:9a:48:57:b4:65:e4:f5:fa:94:
3a:e9:c2:42:1a:c2:45:c1:ba:ca:48:a2:15:34:68:ac:06:b5:
78:e0:db:26:e4:13:3d:4c:d7:e8:a4:46:87:58:d8:dd:db:cc:
ba:e1:fa:7a:82:1a:d5:13:b1:8b:bf:22:08:dd:c6:a5:e4:e1:
66:42:ac:46:75:04:51:b3:54:66:59:59:04:29:bd:1e:e2:b5:
26:05:f8:80:e3:f7:a7:5c:81:32:50:94:69:ed:f0:c2:40:03:
c5:5f:ab:b8:58:e5:11:71:54:1e:c9:04:7b:ac:ce:63:80:48:
fb:a5:4b:9a:dd:c7:ba:97:06:a0:7b:2c:bc:68:3f:18:84:8c:
6a:0c:11:a0:d5:49:d6:c8:e5:e4:d2:22:ef:1f:d9:eb:b5:44:
da:ba:52:a7:90:f6:2c:80:77:01:1f:7c:91:49:b6:af:b3:e1:
68:3e:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:22 2025 by rpki-client