Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
File: XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer (raw, json)
Hash identifier: 3DYYIqVfNsWoif4rs9y8iMRifDtnI4mbpRvyL9nMhDM=
Subject key identifier: 5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C958
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jul 2026 15:03:19 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 140997
IP: 103.153.13.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182616 (0x2c958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 15:03:19 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91C9561, serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:de:ec:ec:f9:7c:f6:df:7b:39:7a:e0:ba:
54:d6:af:1a:1d:4a:42:8d:d3:89:4f:82:47:e3:3c:
4c:f6:9f:f8:e7:39:1b:29:21:de:c9:fa:9f:82:2a:
b2:3a:98:43:6f:92:5c:ec:be:3b:72:0f:d9:25:fc:
5a:bf:9a:99:74:8f:4b:67:b6:27:64:ba:8d:01:40:
e8:67:3e:be:be:aa:5e:19:04:a8:c4:e0:06:5b:2a:
c4:b4:2d:70:34:99:22:0e:7c:f0:42:10:b6:b1:c3:
64:80:c2:cf:81:2c:d2:10:24:13:d0:c5:39:48:02:
9f:db:9d:7f:7f:29:df:ec:1e:80:fd:92:a5:9f:83:
6c:9c:7a:cc:03:8c:0e:9f:6c:cb:36:96:44:dc:99:
dc:44:97:0a:d1:5d:c5:41:9a:af:2d:31:ff:0d:c5:
14:fd:41:25:37:b4:5e:5b:05:ba:7f:8e:30:13:1f:
7c:b6:33:08:e2:f0:22:a5:13:84:c6:c3:82:ae:96:
8f:8a:d1:12:ce:72:71:4e:c5:5b:2d:23:77:95:17:
b3:b3:25:2f:aa:b7:54:fe:33:cc:6d:a7:65:a2:ac:
34:ab:6a:64:5c:42:a0:d7:27:88:90:1e:d0:57:d3:
42:56:44:e2:e7:1e:a4:75:5d:79:30:1c:ca:3c:c3:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140997
sbgp-ipAddrBlock: critical
IPv4:
103.153.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:28:41:2c:67:e1:1d:1d:58:c2:5e:2e:76:f5:25:4e:b8:ca:
4f:d3:20:83:fe:ea:27:c2:59:7a:21:32:b6:e6:18:92:36:a5:
a0:71:5e:c2:14:d8:24:58:fb:be:1b:d3:77:18:79:72:b6:b8:
6a:58:49:79:47:ea:59:6a:e7:05:37:5a:41:5c:cf:80:40:f4:
67:9d:79:5c:fc:6b:38:94:2c:0f:03:cf:3a:ae:94:56:c7:ee:
66:e3:ae:38:0d:bb:3c:c1:1d:6f:f4:46:d5:dd:64:16:5d:e3:
4e:6b:6d:ca:51:82:79:58:74:13:c0:db:b5:56:7e:4a:44:42:
83:c4:36:0e:ca:89:e7:27:84:72:5f:fa:42:01:a3:3d:91:d6:
fd:72:97:6d:49:c0:37:d9:78:6c:45:b7:20:a6:04:4b:ec:5f:
99:2e:d7:62:23:a7:73:68:e0:77:cf:a8:9b:e5:1d:e1:7e:70:
01:1b:18:42:4a:48:3a:1d:61:36:c2:15:71:1b:8e:41:c6:2d:
c5:eb:b4:a5:8f:7f:f5:25:c4:42:e4:f5:6d:cc:51:29:b3:9e:
44:77:c3:0b:af:eb:48:21:b0:67:ff:10:2a:54:d6:ac:12:92:
87:85:8a:f7:5b:38:2a:c1:84:d2:e7:a5:f6:09:d0:16:f3:3b:
59:85:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:48:55 2026 by rpki-client