Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
File: Yg05s6GDeXO9EyafKwasmyc4gg0.cer (raw, json)
Hash identifier: ehA/vgGZinzw/KJrLXRyhYNOobJcXgiYy8/IABYAV+U=
Subject key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027293
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 19:31:53 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 18381
AS: 153368 -- 153369
IP: 43.250.52.0/22
IP: 103.41.176.0/22
IP: 103.147.152.0/24
IP: 2406:4fc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160403 (0x27293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 19:31:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:5a:fc:07:14:96:e9:65:d2:8f:8d:29:7c:
a7:cb:7b:2f:78:22:54:97:3e:64:fd:bc:4a:1c:6a:
98:85:05:5b:52:84:c4:6d:25:bf:d9:e6:4b:2c:e1:
8f:19:2f:64:f2:18:c6:14:77:a3:b8:88:d7:4a:4b:
d7:07:3b:f2:13:61:be:03:fc:c2:4f:5a:09:49:db:
df:cf:83:b5:0a:6a:cb:5f:c4:6f:3f:1d:f0:97:59:
2a:eb:ac:5f:a5:c2:dc:6a:16:c4:cb:1c:57:af:fd:
14:75:62:11:55:f2:b4:5c:4f:ca:16:fc:fc:90:aa:
b5:7f:33:0e:d0:5f:f2:70:c1:28:a3:fc:49:61:ee:
8e:82:66:3f:2d:70:bc:5b:96:61:d0:2a:bc:6a:6d:
7f:95:4e:3c:46:da:f6:af:c1:1f:6f:11:85:24:95:
4c:23:3d:ea:35:0e:36:7a:e5:54:2d:b6:14:fa:27:
85:4e:05:9c:81:0d:b5:9d:aa:23:c6:a2:e1:22:55:
ea:6e:67:23:df:8f:33:22:a2:34:00:e4:94:46:54:
76:e8:89:4e:0b:c9:b5:04:7a:e7:aa:5e:7e:46:42:
5b:69:5b:de:e3:08:7d:36:68:d7:cf:a0:41:2a:1e:
51:d9:64:15:3d:16:db:eb:29:a3:7f:d3:9b:12:6a:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18381
153368-153369
sbgp-ipAddrBlock: critical
IPv4:
43.250.52.0/22
103.41.176.0/22
103.147.152.0/24
IPv6:
2406:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:23:ef:0f:c6:84:69:f4:aa:ef:36:b0:cd:99:cb:66:a0:5c:
b4:5e:d4:0c:aa:d2:38:b5:ce:b5:e5:d2:6b:46:97:74:38:6e:
36:f7:8d:bb:72:e4:b1:5d:f7:0c:26:a0:29:64:3c:68:27:13:
4e:d6:a5:44:ce:af:bf:e7:33:41:62:12:df:9a:17:a3:5a:d9:
a3:ff:dd:d0:40:92:83:ef:3b:8d:1e:3a:7f:06:03:85:ec:89:
05:07:aa:99:49:dc:5d:ba:30:e8:5c:d0:5a:ac:db:b2:f1:8e:
6e:3e:91:96:e9:00:6b:94:e8:11:dc:b1:bb:c3:43:1f:a0:c1:
6f:a7:6e:d2:49:c4:3e:c9:39:30:df:09:5f:c6:6f:ad:d6:94:
be:d5:86:b6:60:d7:c7:4b:e2:8c:bc:15:5b:1f:05:90:23:f6:
eb:f5:ee:8f:0f:bf:33:28:be:6a:17:f8:1c:89:53:11:c8:75:
7f:88:6f:1d:2d:8d:ba:25:0c:22:e8:62:c5:16:aa:2a:8e:a3:
44:5a:89:89:23:a8:e7:73:12:5c:4a:11:5a:14:7d:46:44:51:
6c:5f:37:f0:5a:64:b9:03:34:e8:c0:7c:e9:79:fb:1e:96:87:
fc:14:7a:8f:0f:1f:46:aa:27:3d:5e:0f:8e:db:1d:37:27:1b:
28:78:a3:fa
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIDAnKTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEwMzE5MzE1M1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5
RjJCMDZBQzlCMjczODgyMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIMVr8BxSW6WXSj40pfKfLey94IlSXPmT9vEocapiFBVtShMRtJb/Z5kss4Y8Z
L2TyGMYUd6O4iNdKS9cHO/ITYb4D/MJPWglJ29/Pg7UKastfxG8/HfCXWSrrrF+l
wtxqFsTLHFev/RR1YhFV8rRcT8oW/PyQqrV/Mw7QX/JwwSij/Elh7o6CZj8tcLxb
lmHQKrxqbX+VTjxG2vavwR9vEYUklUwjPeo1DjZ65VQtthT6J4VOBZyBDbWdqiPG
ouEiVepuZyPfjzMiojQA5JRGVHboiU4LybUEeueqXn5GQltpW97jCH02aNfPoEEq
HlHZZBU9FtvrKaN/05sSan8TAgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQUYg05s6GD
eXO9EyafKwasmyc4gg0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNkY2OC85MkUyNTk2MkRGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZH
RGVYTzlFeWFmS3dhc215YzRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQgBAf8EFjAU
oBIwEAICR80wCgIDAlcYAgMCVxkwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID
BAIr+jQDBAJnKbADBABnk5gwDQQCAAIwBwMFACQGT8AwDQYJKoZIhvcNAQELBQAD
ggEBAIoj7w/GhGn0qu82sM2Zy2agXLRe1Ayq0ji1zrXl0mtGl3Q4bjb3jbty5LFd
9wwmoClkPGgnE07WpUTOr7/nM0FiEt+aF6Na2aP/3dBAkoPvO40eOn8GA4XsiQUH
qplJ3F26MOhc0Fqs27Lxjm4+kZbpAGuU6BHcsbvDQx+gwW+nbtJJxD7JOTDfCV/G
b63WlL7VhrZg18dL4oy8FVsfBZAj9uv17o8PvzMovmoX+ByJUxHIdX+Ibx0tjbol
DCLoYsUWqiqOo0RaiYkjqOdzElxKEVoUfUZEUWxfN/BaZLkDNOjAfOl5+x6Wh/wU
eo8PH0aqJz1eD47bHTcnGyh4o/o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:51 2025 by rpki-client