Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
File: U3TG518YYFJFWi2NpSkv7wCcya8.cer (raw, json)
Hash identifier: e+Y5Zo1CdGt32Mt28M1NG2ARWta9CLxu0Q3Hv14GiLs=
Subject key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02712D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Oct 2025 18:15:31 +0000
Certificate not after: Sun 01 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 63916
AS: 132068
AS: 134520
IP: 27.122.56.0/22
IP: 43.239.156.0/22
IP: 43.245.196.0/22
IP: 43.251.156.0/22
IP: 103.1.152.0/22
IP: 103.10.196.0/24
IP: 103.10.198.0/24
IP: 103.35.72.0/22
IP: 103.68.223.0/24
IP: 103.71.254.0/24
IP: 103.72.4.0/23
IP: 182.161.32.0/22
IP: 202.144.192.0/22
IP: 2402:c480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160045 (0x2712d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 18:15:31 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:98:f1:ac:b3:ec:cc:85:27:bf:41:44:a3:
12:ec:50:ff:b8:9c:56:e5:d3:7c:45:ad:2c:4b:3b:
1e:e9:07:f3:4f:4e:23:a4:d7:35:ba:2a:57:7c:2d:
d2:2c:b0:b3:af:a6:ee:c1:f1:25:6d:be:f0:38:99:
5e:40:5a:3e:97:1c:66:25:e3:f5:d6:87:8d:7e:82:
b7:33:18:1f:5b:d4:2f:c2:95:b1:86:89:12:a8:af:
9d:e1:38:cd:8d:b1:7f:fe:0a:bd:76:91:11:97:22:
54:bb:07:1f:7b:e9:f4:60:62:a4:2b:d7:b4:49:bd:
05:33:6e:41:05:c5:28:02:f4:05:c3:96:e0:5c:fe:
08:46:34:b1:c1:50:8f:b0:47:fe:29:c7:84:25:d0:
90:7e:d4:00:b9:7a:31:73:14:76:f2:3c:10:e3:c3:
0c:17:c1:6b:8a:05:e2:a6:cb:b8:92:c2:6a:ad:5c:
bb:36:68:59:2f:43:19:a0:18:d3:aa:86:d5:ff:ab:
28:3a:a9:49:3b:f9:a4:3e:0d:16:b2:4e:ae:57:46:
fa:c9:2d:76:ac:8e:ca:b9:59:a9:d1:1f:7d:a4:12:
61:50:2e:62:64:5f:a8:97:07:1e:28:4e:1a:da:6c:
a1:4c:c3:fa:33:18:85:83:25:55:33:17:b6:01:94:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63916
132068
134520
sbgp-ipAddrBlock: critical
IPv4:
27.122.56.0/22
43.239.156.0/22
43.245.196.0/22
43.251.156.0/22
103.1.152.0/22
103.10.196.0/24
103.10.198.0/24
103.35.72.0/22
103.68.223.0/24
103.71.254.0/24
103.72.4.0/23
182.161.32.0/22
202.144.192.0/22
IPv6:
2402:c480::/32
Signature Algorithm: sha256WithRSAEncryption
93:b5:77:44:30:be:5e:bd:2a:7a:93:ec:e2:42:41:24:43:39:
c8:b3:2b:c6:ec:76:50:16:ed:20:9e:9e:7a:3c:24:b2:af:6d:
c6:ae:e6:b3:a8:ad:6a:b9:04:cd:23:3e:62:d1:87:63:d0:b3:
07:14:0e:07:e0:63:e8:c0:c4:28:4b:fc:90:17:99:e5:e7:b9:
87:e6:a7:9c:41:61:a1:31:2a:c8:50:a5:42:89:06:18:f9:4e:
38:12:c9:4f:58:b4:ad:6e:19:c3:c4:72:a2:eb:ca:e5:a0:e8:
4e:00:a9:ef:9b:30:02:2a:2f:75:83:56:89:d7:b5:0c:af:12:
4d:77:e5:90:56:23:12:64:7c:93:5f:4c:64:60:f0:84:42:92:
69:35:29:66:63:f4:67:e6:b5:0c:25:ec:73:28:e2:81:32:80:
10:a8:8b:9c:9b:74:7f:73:3b:50:19:f2:60:a2:2c:eb:fc:0c:
cb:41:c2:85:c1:f7:5e:15:45:ec:70:8b:78:2c:86:f3:6a:8e:
33:c4:f1:df:ca:90:69:82:50:d6:a1:9d:05:fd:96:57:8d:ee:
e4:7c:42:cd:c8:b8:ce:3f:a0:bd:33:1d:69:7c:3c:bd:b1:b6:
fc:9f:6e:e0:5a:fd:e8:82:60:6e:4c:9f:c6:19:25:a4:1a:02:
59:a4:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:12:19 2025 by rpki-client