Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer (raw, json)
Hash identifier: zro0B8Ukpj8u7dARm4GAjNmC+Lq2hkS4gnV9pIZPTmQ=
Subject key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027050
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 21:15:38 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 134747
IP: 103.197.88.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159824 (0x27050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 29 21:15:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:e7:06:b9:3e:06:28:66:9c:97:0a:bb:0a:
a1:ac:8c:52:97:6f:54:ea:fb:00:04:21:56:c2:bc:
8c:8a:3c:d6:a6:2c:29:53:5a:59:b1:6a:d6:87:90:
15:79:1a:c9:59:92:83:3f:2c:e9:61:27:0c:6e:37:
07:cb:a2:5e:ac:46:d4:6b:5c:90:fc:1d:5f:ae:52:
de:4b:a8:fb:81:20:ff:ea:63:d5:74:d7:6f:9d:ac:
2e:44:2c:b9:86:52:9d:bd:9b:a2:b9:8d:fb:3f:75:
19:5b:47:ff:fc:6b:3a:e3:b4:29:7d:96:f7:9a:d3:
f6:11:50:cc:3f:ed:19:7d:fe:35:cb:e8:a6:9e:98:
34:fd:e2:ff:bc:12:f1:6e:fe:f3:96:01:64:5c:6e:
ac:f3:7c:6b:73:7f:85:57:7b:35:4f:f2:f7:91:00:
bc:90:39:c9:e4:fb:c8:5f:ef:05:64:c1:c6:93:e5:
ed:af:2c:75:a2:c7:79:0b:18:6f:cd:17:1b:68:ff:
89:62:c2:b1:0c:fc:58:35:fb:ca:6c:86:d9:5f:c7:
61:a8:4b:bf:dd:6f:e1:a7:e9:fa:f1:89:09:a1:f3:
d3:53:94:81:65:5f:00:c2:dc:d0:17:2f:63:80:e8:
d1:0e:d6:17:ae:dd:f0:19:fc:87:41:04:00:2e:5f:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134747
sbgp-ipAddrBlock: critical
IPv4:
103.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c2:a1:69:77:52:0d:de:18:27:b8:89:92:c5:89:2a:8e:92:
7d:3c:e5:ec:1d:ae:d0:03:f9:23:42:af:6a:14:0a:a8:75:14:
7b:db:55:c4:cf:9c:34:05:4a:22:be:0f:d9:5e:c9:71:24:8e:
03:54:fb:55:89:92:96:1d:e7:69:0d:57:6d:32:f6:86:a3:ce:
d2:65:bc:f2:a9:5c:72:d4:8e:de:f0:54:aa:f6:12:f5:92:38:
36:90:85:fd:a8:2f:e8:68:ac:77:12:c5:88:ff:b0:43:7c:91:
03:01:d2:c9:a0:fd:f7:ca:5c:84:69:eb:87:69:b2:e2:b7:6a:
ba:66:9d:48:bd:0c:ae:34:db:bb:bf:03:58:19:2e:0f:b0:4a:
d2:7b:fd:e4:d6:59:4c:5e:91:a1:14:d2:ab:d7:cf:1a:9e:fa:
af:a1:16:fc:cc:ae:a2:fc:47:21:e9:b4:7b:31:2b:bf:aa:3c:
61:c6:69:d0:dc:61:90:2b:ea:2a:64:c7:a2:1b:26:f0:99:5e:
26:f1:98:71:e1:11:41:19:93:9d:3f:aa:50:9e:0a:aa:17:67:
35:79:2f:41:7a:e4:52:7e:bc:14:dc:8a:f8:ce:dd:34:e4:0b:
79:5c:1d:16:65:e5:eb:a5:62:f5:55:17:00:30:10:cc:09:7e:
b7:33:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:38 2025 by rpki-client