Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
File: MOIGH3wgvYQ77lNywTIcNfux0-8.cer (raw, json)
Hash identifier: qLg3MNRNTyFcqF39Li4BcZaCDGYqHyehgCGMhPNzP0A=
Subject key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 19:56:32 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 9876
AS: 55850
AS: 55926
AS: 132333
AS: 132375
AS: 132687
AS: 136984
AS: 147045
IP: 14.137.0.0/19
IP: 101.53.192.0/19
IP: 103.8.140.0/22
IP: 103.15.126.0/23
IP: 103.26.202.0/24
IP: 103.173.250.0/23
IP: 103.241.56.0/22
IP: 115.69.160.0/19
IP: 116.251.128.0 -- 116.251.203.255
IP: 124.155.224.0/20
IP: 150.107.172.0/22
IP: 163.47.236.0/22
IP: 180.148.96.0/19
IP: 202.36.126.0/23
IP: 202.56.32.0 -- 202.56.55.255
IP: 202.74.33.0/24
IP: 202.137.240.0/21
IP: 203.94.32.0/19
IP: 203.124.16.0/21
IP: 2001:df4:a000::/48
IP: 2401:2f40::/32
IP: 2406:5a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159243 (0x26e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 19:56:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:25:9f:d6:5a:8b:f7:1f:38:39:68:84:bc:
28:12:f8:16:84:92:38:58:2e:a3:4d:20:45:d2:6b:
51:23:47:0e:55:e6:ef:56:03:88:91:2c:84:f0:da:
04:bc:74:37:c9:90:16:52:cd:45:75:07:ee:47:87:
2e:51:d8:0b:d9:89:c2:e1:41:ef:07:13:3c:39:42:
19:0a:e8:d8:4f:98:2f:e9:16:46:89:88:d0:eb:1c:
92:a1:b2:de:0c:b5:53:28:a4:0d:bf:53:af:33:a1:
7f:8b:23:3d:34:9f:7a:50:2f:4e:4d:41:92:4c:8b:
3e:d8:c1:43:90:1a:a3:22:75:af:b7:c6:e3:e9:6a:
28:5b:b4:61:9a:40:f5:04:fa:15:47:66:9c:8b:5b:
2f:3d:5e:5b:3e:0d:f7:55:ee:9b:17:4b:45:bc:80:
66:aa:fb:77:e9:a0:47:aa:23:ae:6d:e0:0e:07:f1:
d5:6f:f8:96:c6:51:95:36:4c:ae:08:11:0c:b7:99:
bb:b1:f9:cc:07:8a:ac:0f:d8:7f:07:ac:da:36:91:
08:72:c7:00:14:1c:fd:07:ad:e6:ad:3a:28:8a:0d:
99:67:41:dd:93:53:cf:7d:03:f2:b0:83:be:16:a9:
47:60:22:d5:3b:48:7b:ea:e2:7b:06:33:1a:b0:16:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9876
55850
55926
132333
132375
132687
136984
147045
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.8.140.0/22
103.15.126.0/23
103.26.202.0/24
103.173.250.0/23
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
163.47.236.0/22
180.148.96.0/19
202.36.126.0/23
202.56.32.0-202.56.55.255
202.74.33.0/24
202.137.240.0/21
203.94.32.0/19
203.124.16.0/21
IPv6:
2001:df4:a000::/48
2401:2f40::/32
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
b4:bf:bf:e7:be:58:e0:55:9d:03:a6:f2:3a:b5:13:90:ad:00:
ba:d9:14:48:e5:f2:cb:d8:c6:55:38:4f:0b:9a:13:13:8b:13:
8a:98:84:36:73:19:49:d4:31:b2:2a:e0:cf:be:3a:9c:e7:1d:
a7:bc:5a:fb:d1:bd:3d:89:1d:a3:7d:1e:d7:7e:09:03:fe:4d:
ed:20:b0:bd:19:22:a7:47:01:4b:7d:3a:c4:a2:99:a4:91:6e:
b7:6c:0f:35:9b:d6:88:33:c5:67:06:a8:7c:7b:6e:7e:64:bf:
09:d7:df:5a:19:ca:fb:df:f4:d3:8d:0a:cb:9a:21:b2:91:67:
04:3a:1f:30:50:d1:3c:21:c4:48:69:7f:6b:d2:1e:3c:44:ed:
a2:9e:ed:d4:27:72:f5:0d:fc:5e:e1:6d:60:08:41:af:2d:1d:
0f:3c:e1:1c:69:2a:74:da:34:04:4a:35:29:d5:4d:3e:bc:15:
cc:54:3c:f3:8a:06:7b:0b:35:ee:97:7f:4c:3e:51:60:84:69:
a5:81:04:42:7a:d4:4a:eb:c4:8a:be:fd:19:dc:81:8e:9c:d0:
10:a6:71:8d:76:ef:2a:ed:1c:76:4f:1b:46:91:b3:30:10:ad:
e2:c6:09:eb:bb:87:47:5f:bc:81:4b:c6:b7:e8:96:14:3e:2b:
4a:47:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:37 2025 by rpki-client