Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
File: 125W2VTMXAD-XW6t2N9QJypb3yk.cer (raw, json)
Hash identifier: IpxXee/43r9ku1DE3I0aehySh1oHZl9iDhrCOScQg8M=
Subject key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029857
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:39:14 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 138427
IP: 103.125.82.0/24
IP: 2001:df7:2700::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170071 (0x29857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:39:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a7:f2:04:c4:c0:51:95:0c:88:76:62:6f:
e9:f4:b6:8d:28:1e:14:23:b0:46:4a:c5:12:b2:98:
9b:1a:27:f8:cf:cc:ee:67:d9:70:60:22:f3:f0:11:
c8:c4:d7:d0:75:47:28:52:0b:b1:c5:24:0d:a4:30:
2d:c8:9e:e1:8f:30:5a:fa:42:ce:b3:cc:28:38:8c:
1f:d3:1a:72:1c:af:51:f8:d4:2c:3e:12:17:c7:5c:
7e:f4:71:76:38:25:f2:22:27:4e:7d:22:45:04:52:
4c:a0:8e:1c:32:88:00:f0:f4:f6:3a:c2:ae:a7:2d:
a8:47:7a:23:6d:69:e2:49:a4:ba:15:09:35:15:5b:
b8:1e:23:47:36:1d:c2:77:3f:97:de:88:a0:35:32:
36:7d:52:55:78:d0:f6:e0:be:72:cd:41:c8:4e:74:
eb:88:64:4b:39:f1:bc:ff:ed:73:07:05:f9:fb:32:
0c:81:ab:ba:a3:f0:23:52:f5:84:77:82:b0:7d:f6:
be:9d:9d:98:45:11:3f:68:a3:3d:b6:f4:4c:ab:ff:
dd:4a:0b:f1:49:22:9c:01:d7:05:ab:1f:1b:32:32:
f9:c8:9d:38:54:cd:c5:08:a3:76:1b:19:95:f8:f2:
44:be:a0:7f:de:3e:85:f1:7b:e8:88:05:ef:5d:75:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138427
sbgp-ipAddrBlock: critical
IPv4:
103.125.82.0/24
IPv6:
2001:df7:2700::/48
Signature Algorithm: sha256WithRSAEncryption
72:ed:c4:3c:e0:41:72:71:29:20:23:3c:24:1c:a4:81:88:7c:
73:dc:6f:14:66:3a:df:60:a3:52:5f:01:9e:6d:8b:7e:c7:a3:
aa:c4:13:c4:17:33:c7:c1:49:0e:09:52:18:38:6f:48:7f:f8:
17:f0:11:a0:56:96:9b:cd:5d:c2:82:2e:38:42:15:45:77:a8:
0d:58:08:c1:22:63:75:20:0e:96:da:22:9c:06:d1:0e:08:be:
cf:76:6d:84:34:60:b2:26:a3:e1:34:04:49:a7:54:b3:d0:59:
4c:7e:d0:0d:fc:63:93:71:b8:9c:cc:2d:5c:17:26:95:b5:da:
2f:1b:42:7c:6b:7c:cc:4a:72:44:e3:7b:13:8c:24:77:bf:88:
ef:cc:98:22:1a:5d:a6:4d:87:53:fd:bd:31:c2:25:02:7b:de:
4f:cd:d1:4a:4b:6e:41:33:4d:68:4d:a4:0d:27:25:ce:df:a0:
b6:62:bf:48:f6:c4:d4:f5:76:36:8c:c2:b7:88:30:8d:6c:2a:
e6:74:bf:88:0b:14:4c:67:f0:2b:77:79:0b:15:28:e5:29:1c:
39:27:a6:d3:ff:ac:cb:db:9f:83:0d:ec:da:80:77:a2:ee:da:
8b:30:14:57:89:c0:3f:6d:f6:b9:7e:1f:c0:5a:6a:b1:5b:a0:
82:c9:ce:26
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAphXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMzkxNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVB
REQ4REY1MDI3MkE1QkRGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCY7qfyBMTAUZUMiHZib+n0to0oHhQjsEZKxRKymJsaJ/jPzO5n2XBgIvPwEcjE
19B1RyhSC7HFJA2kMC3InuGPMFr6Qs6zzCg4jB/TGnIcr1H41Cw+EhfHXH70cXY4
JfIiJ059IkUEUkygjhwyiADw9PY6wq6nLahHeiNtaeJJpLoVCTUVW7geI0c2HcJ3
P5feiKA1MjZ9UlV40PbgvnLNQchOdOuIZEs58bz/7XMHBfn7MgyBq7qj8CNS9YR3
grB99r6dnZhFET9ooz229Eyr/91KC/FJIpwB1wWrHxsyMvnInThUzcUIo3YbGZX4
8kS+oH/ePoXxe+iIBe9ddSJRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU125W2VTM
XAD+XW6t2N9QJypb3ykwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFEQjQxLzE2MEI4MjRFMDIwMTExRUI4RTQ3Qjk1Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBREI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZU
TVhBRC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhy7MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ31SMA8EAgAC
MAkDBwAgAQ33JwAwDQYJKoZIhvcNAQELBQADggEBAHLtxDzgQXJxKSAjPCQcpIGI
fHPcbxRmOt9go1JfAZ5ti37Ho6rEE8QXM8fBSQ4JUhg4b0h/+BfwEaBWlpvNXcKC
LjhCFUV3qA1YCMEiY3UgDpbaIpwG0Q4Ivs92bYQ0YLImo+E0BEmnVLPQWUx+0A38
Y5NxuJzMLVwXJpW12i8bQnxrfMxKckTjexOMJHe/iO/MmCIaXaZNh1P9vTHCJQJ7
3k/N0UpLbkEzTWhNpA0nJc7foLZiv0j2xNT1djaMwreIMI1sKuZ0v4gLFExn8Ct3
eQsVKOUpHDknptP/rMvbn4MN7NqAd6Lu2oswFFeJwD9t9rl+H8BaarFboILJziY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:57 2026 by rpki-client