
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer (raw, json)
Hash identifier: JINrb6m7LcAshuL9B/KwAoa9Jqux4Opf5qThySfx8RQ=
Subject key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 18:56:57 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 58419
AS: 58462
AS: 136801
IP: 103.10.252.0/24
IP: 103.23.214.0/24
IP: 103.95.193.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154213 (0x25a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 18:56:57 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:f3:e2:bd:f0:d5:8a:29:ea:fb:3e:f1:90:
97:a5:1e:8b:84:38:1b:28:92:a6:cc:0a:68:8b:61:
54:8c:31:3b:06:d9:2d:f7:f7:15:da:8c:c8:84:42:
34:07:1d:a0:71:95:3f:2a:a2:02:13:bf:f2:89:8a:
ea:3c:06:fe:97:9a:92:0e:2e:4c:31:4e:45:5e:58:
c8:a7:d2:d5:e8:6e:55:02:d6:a6:d8:ae:8b:55:df:
80:fe:4e:2c:b0:1d:ee:4b:78:17:1b:06:e8:27:84:
7a:03:86:11:ef:a3:33:91:1a:dd:56:77:d0:24:a9:
a5:05:f6:f2:b9:ed:05:51:ed:c8:d8:f0:ba:3f:8c:
71:6e:c8:12:f4:c6:7f:6a:5f:d6:02:d9:98:c7:07:
b8:59:3e:d2:72:d1:7e:d0:7b:9d:c0:b7:25:7f:cf:
34:bc:f6:ab:d0:ad:9e:a6:af:0e:8d:fe:0b:c8:b6:
41:94:45:9e:0c:f2:5a:3d:65:12:c4:75:43:0c:13:
2d:0b:23:67:84:94:89:77:9b:f4:ba:ca:b0:d6:8a:
4b:30:4d:af:46:ec:ab:ee:51:05:ee:fa:33:68:5b:
22:5b:fb:c2:fa:88:56:ef:71:9d:bf:89:93:65:66:
73:48:a8:a7:de:d9:9d:a8:30:ac:eb:25:ec:82:08:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58419
58462
136801
sbgp-ipAddrBlock: critical
IPv4:
103.10.252.0/24
103.23.214.0/24
103.95.193.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f8:c6:10:81:58:8b:f6:fb:54:b1:df:b2:fc:3b:34:b2:67:
c9:ac:0d:ba:1d:aa:ed:d9:7c:98:71:3e:b4:a2:45:36:78:db:
2c:e4:5c:c9:71:4a:92:53:cb:75:50:20:d7:7c:97:47:19:79:
cf:4c:71:55:20:92:dc:18:ef:2b:20:4b:f0:86:c0:b4:f2:fc:
38:72:a6:aa:ab:a1:98:a5:a1:bc:81:e2:13:78:30:9f:e3:39:
56:08:c3:13:a6:b5:2d:9d:35:fc:15:f1:76:ef:25:ef:11:78:
76:af:6e:b5:82:88:20:b8:77:c6:02:20:d5:96:ad:b4:f5:8a:
ca:e9:97:d7:93:2c:1b:d8:b0:66:1a:2b:3c:d1:20:01:43:b8:
d2:fc:89:99:69:8f:4b:7c:22:a9:f2:a5:7e:d3:d3:cc:03:3e:
8d:c1:98:9f:bc:05:d6:ea:df:df:c2:f8:65:20:6e:35:59:8e:
71:d8:f4:79:bb:44:b6:6f:e3:49:e1:42:fd:96:fc:50:d1:6b:
4b:e3:d0:ed:28:77:10:4d:e9:db:35:43:12:8c:63:62:3c:2b:
2b:e9:4e:9a:3a:be:a0:c5:18:fd:73:cf:55:e8:51:a3:0a:8c:
35:ae:b7:39:13:b8:e9:61:e3:2c:0c:17:fd:f5:5d:a0:23:8a:
53:40:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:15 2025 by rpki-client