Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
File: WF3cT9n54xQAXzcZj9HiLmgknes.cer (raw, json)
Hash identifier: 1jigdseTQesfKEspX5Uwhrck71eewMtdaW59mOTcAtg=
Subject key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A479
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 12:36:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133934
IP: 103.48.208.0/22
IP: 2402:b280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 05:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173177 (0x2a479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 16 12:36:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:f8:cf:0a:76:27:b5:b8:a7:66:15:0f:3c:
cc:a4:9c:89:00:e8:24:dc:73:2a:f3:47:97:24:1d:
e8:1a:d5:c6:dd:19:76:76:5e:f6:c6:a1:88:c2:10:
86:30:82:53:52:f5:69:db:78:13:64:96:3c:35:b5:
22:e0:08:a3:4c:f0:a2:b4:32:4f:42:8e:8d:ad:33:
39:a3:62:d7:f5:4d:2a:22:64:72:56:f9:c9:6e:21:
1d:b5:dc:69:aa:b3:d7:39:00:59:be:e3:c7:0d:de:
b6:9a:7c:d8:b9:0b:19:d4:27:82:d5:d5:fb:66:39:
c1:51:66:e0:2e:64:41:bd:70:92:36:1a:c5:13:a6:
71:0d:ee:38:25:7b:c2:3a:ec:41:e0:7c:4a:5e:2a:
05:b3:3c:eb:a1:9e:b7:ab:45:4d:2b:a3:29:0e:e7:
17:b1:c9:4e:a1:2f:48:75:18:ad:e0:3f:07:ce:77:
00:7c:80:d5:bb:e8:38:75:5a:fe:b7:7b:51:71:68:
b7:a1:34:b9:55:d2:df:9b:e1:bd:1f:1f:5c:0a:e9:
4b:d7:9f:92:29:89:46:8d:3c:80:b4:dc:05:7d:a5:
ce:81:35:85:93:62:4d:eb:84:20:c8:f9:67:8b:eb:
de:d4:e8:c7:5e:2b:dd:af:f1:4c:b7:19:f7:19:e9:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133934
sbgp-ipAddrBlock: critical
IPv4:
103.48.208.0/22
IPv6:
2402:b280::/32
Signature Algorithm: sha256WithRSAEncryption
6b:3c:77:d4:83:1f:34:3c:c2:05:46:98:d6:77:b5:1c:59:ce:
68:fc:53:84:a5:e7:a3:39:99:37:ec:e7:b8:b0:be:81:77:ee:
be:d7:87:c1:da:85:11:64:08:fa:b3:8b:b7:95:f7:6c:e2:be:
c3:f0:7e:a5:69:72:b4:78:62:9b:79:83:75:10:66:f7:e3:8e:
47:aa:de:f7:54:e1:18:9a:7d:46:b6:3f:5c:96:31:67:af:c4:
36:ef:e7:d6:53:60:8e:9e:61:36:fd:92:9c:ac:1d:e0:2e:9b:
81:eb:70:b2:ee:57:5f:a8:f9:cd:43:7e:4b:74:93:07:47:16:
15:29:4d:9b:96:04:6a:47:ee:9f:fb:76:9d:6e:35:c6:b9:51:
7d:c7:f9:a3:c7:42:27:11:19:39:ca:29:af:69:83:f8:2c:46:
6b:a1:98:86:99:5f:ce:07:19:a9:ff:3e:84:54:a4:d9:da:89:
6c:45:ad:4a:04:47:ca:0f:7a:05:b0:76:1b:e4:57:16:67:a9:
ac:a9:34:ef:6c:7e:18:dc:1b:db:a4:fb:6b:74:e0:0d:57:fb:
fb:94:ed:2d:65:82:0d:67:f7:33:b9:76:4f:e2:a8:c4:cf:e6:
f8:2a:40:4a:8e:32:f7:b8:b1:a2:a4:31:ef:9d:4b:7d:34:02:
26:e1:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 06:47:21 2026 by rpki-client