Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File: wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier: 2tARZMv2S7PEkf1rFWtiVAd5do/0db+KOizErQiaiBk=
Subject key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 Oct 2026 12:47:19 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 59117
AS: 135074
IP: 103.135.208.0/22
IP: 103.172.110.0/23
IP: 103.204.13.0/24
IP: 125.3.192.0/21
IP: 203.168.128.0/22
IP: 203.168.192.0/20
IP: 222.167.32.0/22
IP: 2001:df7:6e80::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187271 (0x2db87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 12:47:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59117
135074
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
103.204.13.0/24
125.3.192.0/21
203.168.128.0/22
203.168.192.0/20
222.167.32.0/22
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
af:82:f9:bc:cd:29:a0:e3:3c:61:5a:0f:81:1d:8b:0c:80:69:
ba:07:bc:76:9c:f6:75:f3:88:b2:fd:93:2b:78:45:77:57:70:
7f:87:e8:c2:a7:26:86:8d:c5:9b:b9:b5:60:9b:b4:54:4e:f8:
23:1d:42:f6:3b:cc:54:47:74:d8:a9:e9:69:28:b7:a6:69:9c:
f2:89:21:0f:67:4c:aa:81:7f:a5:54:40:e6:2b:20:18:ae:87:
4f:2d:0d:be:c8:28:30:37:71:f0:d2:be:5f:f9:d7:f4:4f:6a:
f9:47:73:64:6c:5c:50:c8:91:e4:fb:15:f0:99:1d:9d:39:11:
cb:ec:f2:54:5d:18:11:5a:0d:ac:2f:dc:ea:e1:cb:e4:9a:5f:
8e:79:17:b5:4c:10:e9:0e:ec:ba:2f:46:3c:97:9a:17:d9:3f:
8f:01:ef:2f:2d:ae:57:cd:3e:4e:24:9a:94:54:d7:f1:f1:7b:
02:de:20:63:bc:82:9a:90:63:25:19:c5:77:f3:ed:24:65:02:
50:1d:81:c7:fa:8c:7d:09:ca:aa:a2:05:0f:8e:4f:45:e7:84:
c8:07:7b:40:01:4a:c8:82:0f:29:3d:69:d8:40:7c:80:81:f4:
8e:c2:c1:5b:60:a9:1d:ec:22:48:50:52:70:fd:c2:0f:a0:6d:
52:ad:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:25:12 2026 by rpki-client