Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File: wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier: MWiDVUbVweyn/2ac/NROHzevY+gHmJ85ZtNr+Bg5sVg=
Subject key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0269F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 00:34:21 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 59117
AS: 135074
IP: 103.135.208.0/22
IP: 103.172.110.0/23
IP: 103.204.13.0/24
IP: 125.3.192.0/21
IP: 203.168.128.0/22
IP: 203.168.192.0/20
IP: 222.167.32.0/22
IP: 2001:df7:6e80::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158192 (0x269f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 00:34:21 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59117
135074
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
103.204.13.0/24
125.3.192.0/21
203.168.128.0/22
203.168.192.0/20
222.167.32.0/22
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
8b:e1:44:80:9a:e7:86:5c:55:6c:d4:e7:5f:0d:10:1e:dc:b2:
36:be:dd:78:53:90:67:b2:61:73:5c:5b:9b:3b:b1:4c:88:84:
74:d9:69:15:49:36:30:0e:e7:80:1a:45:6e:73:b8:c0:a0:b3:
43:d2:6f:74:dc:d1:fa:d8:e0:27:aa:c4:f6:ab:39:27:c6:8d:
18:26:3d:42:a7:97:6e:b5:5f:39:f7:7a:e2:6d:e1:e8:bc:2b:
be:6a:85:70:c1:92:45:66:69:02:88:e5:ec:89:1b:03:31:43:
f1:3b:54:56:67:ad:73:bc:ea:5a:d5:39:85:1d:5d:da:6d:51:
b7:02:e2:d4:8b:fc:b6:73:0b:d3:9c:54:1a:38:4b:99:21:f6:
37:e6:c4:7a:36:64:0c:dd:32:18:65:27:0b:7d:43:fd:dc:54:
a4:75:bd:16:34:29:32:f2:a2:c1:fa:e1:22:b6:dc:e2:77:4d:
83:d7:45:03:11:f5:9e:40:e9:b8:93:75:73:61:10:32:3c:90:
69:a8:77:e4:ac:7f:6d:1b:7b:20:dc:b5:12:a2:2b:81:e6:3b:
4f:18:77:98:73:54:e6:0b:1a:ce:55:2e:f8:ae:6f:a9:97:63:
90:2f:5e:ee:8e:6c:60:66:9f:8f:13:b8:61:b3:eb:e9:67:28:
27:b7:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:05 2025 by rpki-client