Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
File: wekLXRHZAbDQSjQmCADU4p8cYqw.cer (raw, json)
Hash identifier: GfoAibWi3ItW71vqx4A4+vg/sxIKb3SGhIVY6YfJ6FM=
Subject key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026262
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 11:25:15 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139603
IP: 103.142.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Sep 2025 13:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156258 (0x26262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 11:25:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:08:e2:33:e3:12:71:57:d9:60:6b:f3:ac:
51:ee:07:b0:14:61:b4:9c:41:1b:8b:32:db:e9:42:
ed:17:3b:24:ca:21:5e:b6:0d:9c:46:34:70:51:97:
59:12:80:23:47:52:dd:ca:82:20:7c:63:9d:19:4a:
ad:a3:b1:ef:4c:8a:ca:7d:ba:33:0d:4b:27:fa:0d:
d1:e3:33:fd:8b:41:fe:71:4f:96:74:4f:56:81:b8:
7e:b5:e7:3e:30:28:a9:2e:84:a5:ee:3d:9b:94:51:
b3:3d:1a:b2:38:dc:af:a1:48:2a:ec:6e:f3:97:59:
f3:f0:13:f9:77:99:9c:ee:e5:bf:59:7c:a2:fd:0c:
89:1e:ab:95:f7:b9:4c:76:00:e8:1f:4e:d8:a2:be:
19:9c:71:ce:28:98:43:19:61:3c:8c:ed:ea:5c:47:
f3:e4:f6:55:74:6d:2c:41:c0:f6:2c:f8:4c:94:a1:
4b:8d:f5:5f:c0:a2:c0:43:fe:03:b6:80:1a:0e:07:
da:50:1c:39:29:79:54:93:e5:3e:2a:66:cd:81:58:
0c:fb:ba:80:a0:39:3e:3b:2e:07:3b:b7:c9:2f:14:
7b:ae:12:1d:59:29:2d:79:49:8a:a6:91:19:17:f5:
ba:2f:dc:5a:eb:e7:92:22:0a:6c:0e:e3:c5:ff:9d:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139603
sbgp-ipAddrBlock: critical
IPv4:
103.142.74.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b9:85:77:e1:82:63:81:5e:bb:98:78:30:77:0d:de:10:44:
17:88:f0:d9:14:bd:04:7f:ac:1a:0b:4f:89:a6:f0:75:2e:55:
08:73:ed:2c:72:3b:de:c4:e3:3c:42:90:4a:fd:04:12:d6:0b:
b9:b3:55:7a:ee:a4:b0:0f:3b:76:56:fe:fc:87:33:bf:b4:5c:
64:f9:67:a9:6f:6d:01:74:3f:b9:03:aa:15:95:8e:ee:c0:3b:
cd:f2:89:c5:e6:99:96:8d:e1:a0:80:5f:17:94:35:61:36:ca:
89:21:6c:01:dd:f5:82:d2:e7:4b:7c:ec:a0:fc:ad:e7:e6:33:
be:e8:00:bb:8d:d4:be:e3:58:cf:60:0b:ae:32:ac:f0:3d:44:
f4:13:d6:97:87:1b:61:4e:13:78:57:48:2c:52:ef:ba:6e:ae:
56:89:f0:af:81:d0:1c:3b:1a:3b:24:1b:07:35:42:36:45:8c:
46:96:07:23:da:0c:72:4e:cb:ee:86:ec:85:0b:81:68:21:e2:
8c:0f:2d:13:9f:59:53:b9:61:f1:73:cb:ad:13:92:0c:fc:b0:
8c:f5:3b:34:ec:54:f6:1b:58:96:1e:bb:ea:36:01:63:18:8f:
93:8e:6c:aa:30:a7:b4:13:04:65:d4:cb:0c:5a:c8:ed:00:d4:
2e:af:e8:8c
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAmJiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkwMjExMjUxNVoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQy
NjA4MDBENEUyOUYxQzYyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDHQjiM+MScVfZYGvzrFHuB7AUYbScQRuLMtvpQu0XOyTKIV62DZxGNHBRl1kS
gCNHUt3KgiB8Y50ZSq2jse9Misp9ujMNSyf6DdHjM/2LQf5xT5Z0T1aBuH615z4w
KKkuhKXuPZuUUbM9GrI43K+hSCrsbvOXWfPwE/l3mZzu5b9ZfKL9DIkeq5X3uUx2
AOgfTtiivhmccc4omEMZYTyM7epcR/Pk9lV0bSxBwPYs+EyUoUuN9V/AosBD/gO2
gBoOB9pQHDkpeVST5T4qZs2BWAz7uoCgOT47Lgc7t8kvFHuuEh1ZKS15SYqmkRkX
9bov3Frr55IiCmwO48X/nRA1AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUwekLXRHZ
AbDQSjQmCADU4p8cYqwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCM0E1LzQ0NTk4NDM4MEM2QjExRUJCMzJEODQxOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJI
WkFiRFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiFTMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ45KMA0GCSqG
SIb3DQEBCwUAA4IBAQAXuYV34YJjgV67mHgwdw3eEEQXiPDZFL0Ef6waC0+JpvB1
LlUIc+0scjvexOM8QpBK/QQS1gu5s1V67qSwDzt2Vv78hzO/tFxk+Wepb20BdD+5
A6oVlY7uwDvN8onF5pmWjeGggF8XlDVhNsqJIWwB3fWC0udLfOyg/K3n5jO+6AC7
jdS+41jPYAuuMqzwPUT0E9aXhxthThN4V0gsUu+6bq5WifCvgdAcOxo7JBsHNUI2
RYxGlgcj2gxyTsvuhuyFC4FoIeKMDy0Tn1lTuWHxc8utE5IM/LCM9Ts07FT2G1iW
HrvqNgFjGI+TjmyqMKe0EwRl1MsMWsjtANQur+iM
-----END CERTIFICATE-----
Generated at Wed Sep 10 15:18:09 2025 by rpki-client