Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer (raw, json)
Hash identifier: F6dyxsDvOhs1pWgKeWwGeBLqXV5bwolPzk38N9thy94=
Subject key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026316
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Sep 2025 17:22:51 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139768
IP: 103.149.202.0/24
IP: 203.19.234.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 05:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156438 (0x26316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 17:22:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9181EBC, serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:a9:77:11:5c:5a:ee:24:53:71:5e:90:d1:
77:d5:46:e9:b0:3f:f4:a4:6a:19:cd:7f:0a:ec:88:
c2:ec:2d:74:82:92:b5:c1:d5:4c:3f:00:51:01:5b:
61:d9:6f:36:1d:b9:d3:8b:dc:1d:6b:a2:90:78:7c:
51:66:01:a3:3a:98:f1:1f:77:da:67:9c:30:fe:15:
eb:44:74:36:32:bf:d4:d2:b6:65:43:37:79:2d:fe:
17:18:12:fe:b1:82:f6:ac:2c:0b:4f:2a:a4:e3:60:
d4:7c:e6:2a:27:0b:0e:e9:a7:42:eb:7c:ab:b1:67:
dc:b9:4f:30:43:2c:cb:07:32:50:ad:1f:0c:f8:9c:
a4:ce:35:6d:6f:21:52:74:3e:1d:92:73:da:9a:e2:
e7:c5:de:6e:4b:bc:ad:1e:cb:4a:f8:6a:e5:9f:92:
cb:40:f8:dc:5d:7d:da:6b:c6:cf:fa:65:57:4d:7a:
f5:c8:cf:20:0f:07:ed:2d:96:c3:8b:76:99:8e:90:
d9:53:46:ac:4c:c5:66:37:ba:eb:6e:bc:78:dc:c2:
9d:b0:d2:04:b8:7a:ff:74:dc:9d:dc:40:29:65:ff:
60:c9:63:96:f7:2a:05:f0:5c:ef:15:fb:ee:ec:b8:
31:1f:82:4e:60:5b:60:95:55:3c:ba:df:d6:f6:e4:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139768
sbgp-ipAddrBlock: critical
IPv4:
103.149.202.0/24
203.19.234.0/24
Signature Algorithm: sha256WithRSAEncryption
60:41:53:b9:16:8d:ae:39:01:97:e5:8e:a4:bd:ff:f2:87:d4:
3f:80:a7:e1:08:1d:a1:71:ef:10:d4:45:37:c9:f4:17:9a:2d:
4d:b8:dc:3d:72:70:2c:53:6c:8f:25:bb:8e:2e:d2:68:65:54:
01:32:86:8b:40:94:17:ff:b8:a6:bd:d3:9b:cb:bc:56:1f:1b:
27:85:4e:a4:9b:0c:cb:82:75:51:40:71:4f:99:07:d7:fa:0c:
36:dc:a6:a0:ee:cd:83:0e:11:9c:a7:07:e7:00:be:d4:81:ac:
49:57:ee:61:f1:84:4f:ee:86:c1:d9:5d:8c:7b:70:f6:bc:24:
d7:42:d0:d9:6b:cb:0b:bd:cc:f7:88:13:e1:ce:18:d7:df:de:
2f:bd:11:96:f4:8e:8b:ef:13:f0:96:09:6c:af:52:26:a7:ab:
1a:17:bb:d3:85:d8:2d:bf:28:e9:30:fc:a9:72:f4:c9:d9:5a:
44:2f:a0:6a:30:21:bc:d0:61:95:0d:8a:a1:a0:e0:8f:ec:76:
3f:54:45:ab:c3:ac:69:94:2c:cd:6c:ef:33:a5:95:6e:da:7d:
03:f6:5f:69:f6:78:42:cf:d9:94:60:14:b3:00:f5:84:8d:ed:
53:18:50:f3:7d:fe:11:4b:8a:10:4a:db:db:99:26:f4:c9:2a:
ea:2c:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:26 2025 by rpki-client