Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
File: kyJx_Edfot2dkzESKwelKNOPjv0.cer (raw, json)
Hash identifier: QbKnhMvxZR5tozg4MBMvRMLmu6TwKpZBzxRlTqBZEto=
Subject key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027205
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 14:35:32 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 23978
IP: 202.38.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160261 (0x27205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 14:35:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:e2:de:f3:21:d3:43:9e:64:1a:05:5c:6b:
3e:a6:d0:bd:0a:40:90:4e:29:e5:e3:4e:5e:20:2b:
d1:79:86:5d:e1:0a:4b:9e:c7:03:7a:f2:b4:bd:80:
ea:39:03:d5:d4:82:83:c5:bf:07:e7:3e:e7:85:62:
86:3d:ba:10:0b:ad:30:4a:e7:b3:b6:59:de:d2:97:
9d:7a:58:40:c5:6d:12:b5:09:bf:23:b9:00:5c:4f:
4d:49:bf:17:89:5a:2d:f6:b4:3d:ac:0e:ce:3d:7c:
89:66:d2:9f:2b:31:35:7a:3c:f9:72:c4:88:b2:c6:
2c:12:ec:f3:5a:52:dc:b8:29:df:93:3d:88:c9:64:
e8:75:c0:76:9c:3c:dc:5e:4b:20:48:b8:f7:c3:83:
21:51:c7:d1:d9:c2:31:6b:3f:01:6c:5f:fc:b3:8d:
d7:1b:db:6a:87:90:4a:3e:41:19:79:4b:50:97:70:
60:a6:a5:ae:5f:51:83:f7:db:5a:f6:eb:cc:ba:56:
51:95:4d:3a:9d:29:5b:74:9f:bf:a9:dc:96:81:70:
2e:2a:16:9e:4f:9d:c8:4d:a3:ec:6c:82:9c:c6:11:
b6:f4:f0:09:86:8e:91:a7:9d:76:95:e3:12:d8:45:
3d:4c:3b:1f:d9:25:12:f3:55:18:6d:b6:d5:93:69:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23978
sbgp-ipAddrBlock: critical
IPv4:
202.38.178.0/23
Signature Algorithm: sha256WithRSAEncryption
96:11:63:ab:dd:e3:d3:b4:e6:96:f5:78:a8:ed:b3:95:f0:19:
af:3f:03:cb:e2:7e:55:02:60:5d:f0:68:42:ec:d2:c5:88:ff:
d9:37:1b:9c:a1:82:1f:be:b4:98:06:6c:de:b7:c6:1f:04:5e:
7a:67:84:87:c6:d7:29:f4:9c:d2:4f:f7:a9:c9:86:48:3a:16:
7c:ca:66:96:f6:77:96:80:1d:d1:15:1e:d7:bc:f1:a7:3a:ec:
88:74:1d:be:93:30:75:54:99:a4:04:81:4d:3c:8b:ef:58:51:
0c:cd:b5:a6:f1:5f:90:49:fe:e1:6e:23:bf:2d:04:d7:94:7f:
67:78:a6:c3:63:71:1c:8b:78:14:1a:21:d7:4f:c7:4c:6a:e6:
f5:f3:e6:03:f0:d7:51:4a:cd:fc:ad:9a:2b:84:12:ec:b3:b3:
92:88:44:82:26:a1:ab:e6:b4:92:8f:10:36:2d:4e:dd:5e:d2:
b8:4d:b2:76:90:e8:70:ad:71:7d:0d:23:6f:16:3a:44:fc:17:
a5:04:1d:92:ee:ff:7a:3d:14:3e:d2:ef:7f:3d:8d:51:ac:5d:
e7:9f:20:70:fa:22:f2:1a:47:f1:95:d9:80:34:63:c2:76:af:
cc:c6:02:46:b7:4b:d7:96:0a:92:7c:4b:3d:c6:13:a5:d8:5e:
a5:24:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:14:11 2025 by rpki-client