Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
File: twc6HQnyOiR_zleFKqS4poDG2nA.cer (raw, json)
Hash identifier: 1g8tDOrD0ZhAGiAe/wrEZ3wuHeMM6qLTKZkrDA2RZiE=
Subject key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027099
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Oct 2025 15:20:54 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 132457
IP: 103.21.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 16:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159897 (0x27099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 15:20:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917E75D, serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:41:e0:90:cd:79:c4:63:d1:09:21:08:8d:
1a:81:f8:d7:35:67:a4:b6:8a:82:23:96:06:6e:12:
44:64:3b:73:8b:3a:ad:a3:60:33:d4:3e:ca:3f:04:
d9:28:17:27:9f:ce:f9:ab:eb:0d:e1:53:37:8c:12:
ab:fb:7c:c7:ae:74:f7:5e:eb:92:d6:38:c3:e9:41:
ae:16:b2:fc:75:d6:fa:ed:80:76:96:2b:de:72:62:
39:49:a2:84:65:28:1f:95:f5:0e:b0:6e:2c:f1:30:
46:aa:e9:f1:a1:2c:31:71:7d:a0:44:88:b1:75:30:
a4:79:bf:c0:ae:1b:44:50:95:e1:99:5d:aa:77:75:
9b:ac:f4:2c:36:8d:68:1e:57:fc:3f:04:b9:66:ed:
1b:ec:e1:e1:ae:ed:17:2d:96:d4:0d:6f:4f:ec:11:
15:1e:4c:2e:51:79:dd:82:9e:ae:b4:85:ad:8c:f1:
e3:8f:97:19:5a:87:c8:1d:89:70:05:86:64:3e:8f:
57:4b:f9:63:dd:f1:7d:64:24:07:0e:2a:ea:81:76:
cf:76:f0:ab:f3:c7:9d:68:9a:23:8e:92:38:f8:f7:
64:9e:13:33:d1:a3:24:1f:08:b4:31:e1:32:24:35:
24:ab:f5:e0:cb:c8:2e:5d:c0:cf:45:12:da:ee:42:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132457
sbgp-ipAddrBlock: critical
IPv4:
103.21.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0a:49:b6:cf:15:2b:1d:3c:b4:57:67:b5:64:4f:26:93:1f:
7b:61:56:82:20:bb:33:e1:c6:32:21:02:07:2e:92:b5:ee:ac:
02:9e:7d:1b:26:83:b8:25:97:02:b0:2e:86:3a:d4:48:47:c7:
af:82:b7:79:93:70:33:00:a1:87:cf:d8:09:fa:68:17:fb:77:
5e:97:1f:b6:b8:26:ce:66:d2:38:f3:44:a3:aa:09:9f:39:55:
bb:f5:e6:54:5b:6a:3b:0e:00:8d:b6:df:16:4c:04:9b:b0:cd:
a9:09:d7:96:9e:d1:46:84:d4:67:03:1c:ae:b9:ee:dc:23:8c:
1f:e2:e6:ee:f9:7e:eb:26:60:0e:ef:72:7c:99:c6:f6:06:90:
ce:98:57:d0:40:ff:bc:f7:60:17:68:e2:c5:a8:be:41:15:13:
8b:8e:ab:a2:5e:38:53:4a:43:8f:3b:bd:67:21:91:1a:16:88:
cc:34:77:e8:cd:11:4e:c0:c4:44:09:33:4c:4b:7d:c8:26:70:
37:3f:b6:f0:c8:02:e4:29:95:39:62:e7:9f:4c:95:cb:cf:aa:
b4:7d:c2:64:b6:21:5f:d2:bc:06:84:e2:6e:9e:1f:cb:01:23:
29:9d:d6:d6:7a:4e:5f:11:7f:59:97:a0:1b:00:9f:ff:aa:a8:
94:24:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 17:54:45 2025 by rpki-client