Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer (raw, json)
Hash identifier: Y3r2CbICnAjR7VJmHbrDKaTFTfv9+ECVUvj6KudXas4=
Subject key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025B38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Aug 2025 05:53:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 135357
IP: 103.20.192.0/22
IP: 103.27.176.0/22
IP: 103.30.4.0/22
IP: 103.226.152.0/22
IP: 202.8.120.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154424 (0x25b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 05:53:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d3:66:26:4f:d4:84:88:eb:c1:dd:2b:eb:d1:
91:c4:b3:ea:6a:22:f4:53:10:79:a1:c4:f0:e7:54:
53:b4:38:df:00:0b:a8:86:00:be:a5:e6:bd:26:73:
ec:df:9d:9d:b8:ed:1e:2d:6a:04:86:fa:a6:0f:78:
10:5f:e7:ca:ed:1c:36:d9:ff:a8:a3:18:6a:07:c4:
4d:0b:e5:ab:b8:8a:c1:3d:b1:a0:9c:ae:d3:9b:84:
3b:98:ad:b0:a4:7d:ad:38:11:c0:59:31:22:9a:22:
a0:6a:17:1b:80:2e:79:6d:81:30:d2:56:71:df:25:
2f:d2:a9:94:db:c4:7f:05:65:6a:56:a3:cd:53:ce:
51:cc:a2:1f:5d:9f:40:3f:2a:ce:59:61:f1:78:46:
db:37:5a:b3:1b:0e:1b:ab:3b:97:91:0f:1e:9a:74:
3b:bd:61:60:cd:87:47:4d:ae:f8:34:c8:26:90:97:
d8:06:a9:fb:e5:14:a6:08:ba:53:1d:ed:24:47:bd:
c1:71:4c:b3:14:27:1f:f3:c3:b6:8a:7c:62:bc:a1:
48:08:2d:5c:9a:7b:f9:4e:3c:04:7d:af:a4:80:cd:
65:6d:bf:c4:ff:ad:69:bd:49:d3:b3:6d:89:8e:eb:
14:56:b2:1e:ce:8b:25:c5:4e:fe:c8:88:66:2e:7d:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135357
sbgp-ipAddrBlock: critical
IPv4:
103.20.192.0/22
103.27.176.0/22
103.30.4.0/22
103.226.152.0/22
202.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
72:2c:d4:fd:e5:73:f8:6c:63:88:1c:6b:d2:a7:e7:9d:33:f4:
4e:4c:06:c7:32:f6:08:a1:5a:31:8e:80:68:f3:05:96:65:62:
23:28:f5:6b:f6:a1:65:b4:3f:f5:6c:35:9e:73:16:f9:c6:0e:
9f:ea:30:83:ac:cf:2c:ad:c3:5d:c4:2d:ad:dc:97:73:6e:a9:
7c:f5:49:3b:0f:62:b6:74:34:c1:04:84:40:8e:7d:ad:86:9e:
90:76:0b:de:b8:6b:76:ec:7e:08:23:71:71:04:bb:8a:a1:be:
3b:92:93:21:c0:63:81:17:e2:ef:1f:c8:fd:db:a7:7b:40:12:
91:cb:e6:ed:d0:c4:4d:8b:fc:e4:2f:cf:a8:a3:7e:cf:47:42:
55:d7:46:75:da:d8:c1:68:ed:73:60:a5:78:13:91:37:ab:15:
ff:fb:9c:17:1e:a1:20:b0:9f:a6:dd:74:90:69:ec:20:0b:3b:
6a:88:6e:ab:d5:a8:e9:f7:60:94:c6:f3:c4:95:56:37:36:0b:
60:1d:6c:fd:73:d2:6e:21:81:35:b2:d4:16:98:ef:20:89:72:
92:b7:d8:5e:79:4c:ad:05:61:d5:25:e3:20:9a:8a:df:98:d0:
69:b5:a1:95:03:17:4a:e3:e6:2c:7f:75:7c:06:1a:29:21:11:
db:15:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:19:41 2025 by rpki-client