Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
File: WitzJi4KG4Slqp07Tj3yNWXIHd0.cer (raw, json)
Hash identifier: UdfMbtotXpIIcxhTWFbuFDOE3atNSrHMeLRcF28YQEg=
Subject key identifier: 5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B813
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 17:26:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 136906
IP: 103.164.85.0/24
IP: 2001:df6:c880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178195 (0x2b813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 17:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91AF9EC, serialNumber=5A2B73262E0A1B84A5AA9D3B4E3DF23565C81DDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d6:91:ee:37:ab:cd:07:fe:61:66:dd:79:75:
ac:dd:1a:a8:2a:05:71:01:e8:08:db:42:30:c6:3e:
f6:06:c4:4f:55:b7:7e:28:4a:12:35:05:79:f3:d9:
0b:c3:1b:f9:f7:85:36:47:b4:5e:ee:17:43:e3:39:
1f:d5:ee:21:f2:9c:e2:a7:9a:e0:bc:92:90:df:21:
dc:e8:96:b2:fd:76:f0:ba:95:00:d9:5a:c1:d1:72:
a8:c9:d5:95:59:3c:c6:be:8f:05:68:65:48:59:ad:
be:2e:10:56:61:9d:66:1b:a2:d6:a7:2f:ef:57:f4:
60:0a:bb:9d:75:14:02:ed:17:ab:56:af:24:ed:9e:
53:e6:c9:75:b9:f4:7b:99:e6:e3:f5:83:f3:29:c9:
f3:c1:f0:5f:dc:bb:df:55:fe:d1:ed:ea:8c:19:2f:
fe:fb:6d:95:87:2b:48:8d:8d:47:5a:a1:4f:66:02:
04:c4:af:ce:b2:1c:a8:cd:aa:4f:bb:3e:fc:d6:64:
22:a9:93:cf:7a:f7:9d:de:2d:6d:04:bb:1c:98:b6:
b6:cd:9f:2d:00:0c:0a:54:dd:fc:b0:84:d3:50:5f:
f2:eb:81:e1:26:33:4c:24:f2:99:95:3b:b4:95:3f:
82:74:9c:ca:e8:db:4e:c5:20:51:20:cb:c2:6e:8d:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136906
sbgp-ipAddrBlock: critical
IPv4:
103.164.85.0/24
IPv6:
2001:df6:c880::/48
Signature Algorithm: sha256WithRSAEncryption
c8:a3:a8:2b:5e:41:ab:d8:3b:da:1e:34:62:07:07:0d:65:02:
b6:50:e8:7a:96:ba:31:9c:78:49:41:81:9f:7e:c2:d3:59:66:
f6:5f:6c:39:ac:e8:6c:b9:85:0d:6a:50:0f:00:8e:ba:29:ef:
21:12:81:f3:14:d2:8a:b8:99:c6:52:2f:51:ba:96:a7:03:52:
6e:9a:dd:6b:f6:7b:d7:20:c3:d4:a9:2f:8d:72:d1:3b:e3:54:
e5:2e:58:e9:93:b9:cd:8e:4b:10:59:d1:dd:d5:42:82:8f:03:
23:91:0c:f1:d5:91:d9:0f:b4:15:bc:19:ec:d2:15:79:6c:b5:
08:b4:3e:b3:79:09:11:0e:3d:3b:2b:f5:8b:1c:74:c9:1e:f4:
34:c3:75:7b:dd:56:74:70:3a:1c:c9:5f:39:93:32:a6:54:7a:
d1:be:39:69:a2:cf:24:bc:74:7e:d6:e6:34:c6:61:71:97:49:
93:91:28:3b:4c:84:a7:a8:c5:ec:73:05:95:e8:6f:e7:cd:07:
5f:af:ca:81:9d:11:26:3c:a1:10:fd:7e:28:1e:79:f0:40:f3:
b4:74:2a:41:b3:be:ec:57:c5:e9:d4:bb:31:45:6e:53:34:71:
e3:19:65:be:87:47:d6:cc:14:5c:43:4a:97:32:4a:0b:26:70:
30:5c:13:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:59 2026 by rpki-client