Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer (raw, json)
Hash identifier: tt3Z+b5KJhRI4ZMRFgBXFwURSqsVQ8XH/RTDfoWMxZw=
Subject key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026FA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 06:48:56 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 151190
IP: 103.147.108.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159650 (0x26fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 06:48:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:e3:6e:a6:86:53:49:f4:ba:b8:91:29:7b:
c6:12:26:d6:e4:a1:48:74:3c:86:72:9e:28:4a:d9:
20:a4:c5:01:e8:dc:cd:a7:6c:01:5b:b1:17:fd:dd:
db:55:74:29:e1:af:b0:17:c6:7a:f7:2d:37:cb:d5:
8f:c7:df:a6:dd:59:5b:cc:ad:8f:6e:db:40:fc:35:
49:f3:9e:92:4d:d1:f5:47:d8:4b:82:e0:43:f6:a2:
dd:10:35:91:24:81:cb:86:ff:d6:5f:d5:2f:c4:ea:
59:20:ac:12:21:6f:0d:12:26:e2:59:7b:44:e7:40:
f3:86:b4:0e:10:1a:f7:86:b2:eb:e0:3f:a3:bd:cd:
cd:5a:a1:2c:9e:0d:68:2c:35:09:1d:f0:22:6e:48:
ea:f2:ea:d9:63:fc:96:14:01:72:20:73:97:f9:03:
ca:72:78:54:3b:ea:70:fc:7f:10:54:47:be:0c:f5:
d6:b5:ba:ed:93:90:7c:3d:fa:f9:4d:30:60:e0:36:
f6:e2:2e:8b:0f:ca:11:2c:e2:95:dc:54:b0:14:2f:
1f:b9:e9:63:f4:4b:69:a1:1d:0a:33:35:2b:2f:27:
21:6a:a5:b2:92:ec:2a:6d:4b:50:18:40:4a:b8:34:
02:59:c7:9c:ed:08:7c:e2:29:9e:f7:31:6d:c0:99:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151190
sbgp-ipAddrBlock: critical
IPv4:
103.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:8e:33:b9:79:e1:03:0c:d1:2b:ca:79:e3:46:79:29:82:57:
56:3c:92:df:7a:86:c9:4a:05:0c:e5:cb:30:ca:c1:d4:08:17:
19:9a:ce:2e:27:40:df:7a:cf:35:ce:fb:fd:6f:df:4b:4c:14:
8c:9b:cc:88:b5:b6:e5:1b:17:04:e8:da:c0:5c:63:b6:84:05:
f6:e9:82:ce:25:99:ae:6f:a1:e1:84:c4:8d:8e:e1:dd:8b:cc:
31:3e:ac:00:50:bf:04:ff:ca:94:c9:47:0a:01:c3:8c:50:4c:
3e:64:50:e4:e1:02:02:3c:1d:11:a0:da:a4:fb:09:2d:55:0b:
02:45:64:01:13:43:89:6c:e2:e3:12:b0:cf:d4:4d:dc:d4:b3:
ce:22:d2:7a:74:93:22:e6:6d:80:90:18:5f:78:8c:8f:35:99:
cc:f1:04:f0:14:3d:a1:f2:de:c4:5b:a7:20:ad:4d:56:43:08:
25:87:ab:cb:88:ff:ea:34:79:2c:26:f3:ae:66:a7:6c:82:f9:
12:3c:39:fa:73:5e:1d:a2:03:06:c5:c4:19:93:af:36:47:bd:
0d:7f:d1:32:2e:9c:fe:b0:09:32:01:19:e9:6d:94:9e:1b:27:
2c:d5:a9:f7:79:e0:49:74:3a:c7:6f:a7:18:2d:e9:bf:09:83:
4b:21:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:46 2025 by rpki-client