Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer (raw, json)
Hash identifier: CpkjiY+tsa16TWDzMOCZFu1h5hHq2xLcEdQwYs/1lG0=
Subject key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026198
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 01:02:00 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154189
IP: 202.66.182.0/23
IP: 2001:df6:1240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 21:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156056 (0x26198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 01:02:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:13:31:16:46:c7:db:bf:8b:29:e4:78:c4:
c5:47:40:cd:2d:17:9b:c1:c2:a7:8d:29:71:e0:d7:
0e:2a:c1:eb:b3:38:a5:fc:4b:8d:4c:0c:7c:1d:82:
1a:ad:12:56:1c:a7:38:a1:30:68:68:67:18:c0:23:
a9:2f:16:7a:0a:a8:e9:7c:e3:18:dd:6a:64:a3:93:
26:1c:b2:f9:18:f6:3f:31:65:fa:e5:06:5d:7e:32:
0b:ae:71:c9:d1:28:e1:57:68:38:6d:13:f4:0b:ba:
d8:84:fb:9d:19:06:0f:65:b9:a9:b5:f8:a9:c3:dc:
c0:b8:2f:ef:0b:29:70:45:82:3b:ca:dc:b1:1d:81:
50:b1:4f:1e:64:2d:de:d6:cb:ca:43:6b:7b:24:bf:
58:14:9c:fd:1c:cf:22:b8:73:34:51:64:f2:43:3b:
80:f0:4d:df:78:92:29:bb:f0:bf:be:e9:95:a7:67:
14:cd:5e:80:2d:f6:0b:d1:82:82:98:89:f4:05:19:
12:77:43:5a:9b:1f:a0:93:b0:d2:7c:54:29:bb:c3:
ea:0b:0c:a4:07:bb:12:d7:e0:f6:28:df:10:59:f5:
12:eb:ee:88:7a:36:f4:c9:83:a3:15:c2:e5:3d:b7:
56:c2:e6:b2:72:46:4d:27:05:98:4b:d8:bd:84:61:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154189
sbgp-ipAddrBlock: critical
IPv4:
202.66.182.0/23
IPv6:
2001:df6:1240::/48
Signature Algorithm: sha256WithRSAEncryption
b7:66:f7:27:08:e2:bc:b4:04:db:b3:d5:e7:67:aa:44:66:e2:
eb:9b:28:d6:b0:c6:57:c5:ac:4f:2b:50:95:37:f5:97:14:d3:
97:ec:55:3a:4d:64:aa:75:46:66:4b:b5:b9:d6:c8:db:0f:6b:
28:cc:36:fe:8c:8d:7f:f1:ce:72:e9:40:c3:82:2a:39:ed:d0:
fb:ba:7c:82:1e:8b:4b:d1:85:0d:71:58:b9:22:a0:25:11:5e:
b9:75:9b:bc:8a:03:8c:aa:31:d0:9c:97:ba:f8:48:e1:53:bd:
28:c1:9d:83:a0:f7:6f:93:cb:06:c7:05:5c:4d:e6:88:1f:a3:
36:f2:b5:d6:aa:75:c8:58:24:ce:a3:a3:8c:f1:b4:3b:bc:91:
26:5f:58:a7:5a:b2:46:16:27:17:6a:14:9e:6d:80:94:c6:4e:
0d:9d:83:49:49:b9:66:df:fc:b5:bd:76:e9:c5:7c:70:38:82:
d2:81:f7:d4:57:2f:47:a7:3a:18:7d:55:e9:67:4c:b3:2f:15:
68:31:6c:6e:da:7c:53:07:58:aa:bb:16:ec:56:31:af:53:96:
09:4a:10:73:0f:44:cc:5f:41:d0:20:02:29:2c:bf:70:6c:e8:
51:8a:59:5e:9d:d3:e9:14:f9:41:fd:e1:c9:5a:c4:73:63:89:
79:33:df:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:09:03 2025 by rpki-client