Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
File: LtaWwj0zRedLDXNOJLcQqniq5fo.cer (raw, json)
Hash identifier: AKV+FSflWvM9JuDQ0+yiD48JIN+P0Lg0A5TR+9SG+t4=
Subject key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0272A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 22:54:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135289
IP: 103.212.122.0/24
IP: 2001:df1:5e00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160419 (0x272a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 22:54:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:a5:4f:9c:10:43:7b:b1:f4:bb:7e:dc:b0:
37:1d:57:fe:9e:ed:ab:18:d0:32:fd:4e:3e:3b:cf:
03:68:79:74:4d:85:a8:5b:65:c8:81:4b:e1:59:21:
53:55:18:28:e1:dc:cc:98:82:99:bb:78:f7:75:fa:
3b:b5:66:ca:5a:15:7b:f4:e0:b7:31:9a:15:cb:13:
6d:45:18:d3:8c:d4:79:3a:50:45:79:37:2a:ac:fd:
7a:b9:3d:9b:8f:84:37:55:f2:b7:5c:8d:d3:82:98:
8c:df:cc:91:1d:ce:2b:27:ee:11:6b:61:79:a7:3f:
c1:8f:15:f3:59:db:6d:02:5c:7c:11:7c:b9:db:6f:
20:cb:91:e8:d1:97:6e:c5:42:a4:fa:46:49:1a:9e:
ba:df:23:87:e5:4b:84:63:74:c0:9d:0c:46:37:17:
35:79:9c:1f:78:f0:6e:25:a5:d7:e5:7f:33:77:b0:
0b:0a:76:39:2b:05:03:38:25:7e:6a:c3:d5:c2:6d:
2e:1a:46:da:1e:86:25:00:ae:bc:e2:12:67:51:21:
f6:e0:a5:5d:74:ec:e9:52:24:84:c8:2a:18:5b:c7:
71:45:49:a7:f7:22:3f:32:77:d7:53:61:93:9b:37:
1d:ad:22:de:03:80:33:d1:14:55:44:71:83:30:96:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135289
sbgp-ipAddrBlock: critical
IPv4:
103.212.122.0/24
IPv6:
2001:df1:5e00::/48
Signature Algorithm: sha256WithRSAEncryption
72:92:00:da:bf:b5:12:cc:79:2d:9d:46:da:e6:87:c0:0a:82:
71:b7:41:f3:d6:fa:c2:ab:d6:41:11:7d:3e:32:3a:45:1a:1d:
5d:b4:fc:8b:79:55:83:93:ed:79:46:16:07:2a:55:79:fa:ec:
e5:cf:c2:12:8c:2e:79:a6:40:90:7f:7b:8e:dc:ee:4d:79:68:
6b:44:e4:0e:6d:15:16:41:17:b0:59:08:69:89:b1:78:84:4c:
91:81:3a:0d:50:d7:27:b7:67:bd:5c:a8:e4:bd:a7:d9:cb:14:
19:8f:32:41:c6:97:c2:a8:22:04:b3:01:28:db:f7:d0:b2:dd:
30:33:27:1f:00:69:78:4c:41:08:b4:29:6c:f4:a1:53:63:dd:
3f:1f:2c:d6:3a:b3:8b:7d:fa:9f:24:d3:27:65:2d:ba:38:28:
d1:bf:6f:ed:72:97:de:b0:93:f0:ea:9c:a7:42:fe:dd:76:8f:
e0:d0:c7:37:c5:fd:d4:19:df:47:24:7c:1d:20:03:cc:e8:21:
39:e2:b6:f3:01:4f:6c:0e:c4:9d:92:85:ff:f8:8e:25:19:95:
2d:ba:6f:6b:c5:43:ba:3c:8d:a3:73:c9:93:88:d6:3b:81:23:
d6:9a:61:ea:02:fb:e0:ed:c1:3c:4c:17:4a:f1:85:ef:18:a5:
5f:a9:65:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:22 2025 by rpki-client