
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer
File: uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer (raw, json)
Hash identifier: 7bnkF6q7YpIQcO1gdFzHtvdoztIK8Cv/Z73LnW2mcoE=
Subject key identifier: BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E08E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Oct 2026 04:03:50 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 141163
IP: 103.155.142.0/23
IP: 2406:6f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188558 (0x2e08e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 04:03:50 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91599FE, serialNumber=BA83AE8D26FF183142A4BDD18F2D01396E5E318D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:6c:1f:5d:6d:9f:74:0c:bb:3a:71:72:df:
9b:a0:ca:7a:47:32:98:0f:3a:ea:c0:56:82:c0:4d:
b2:ce:73:9d:36:75:4d:20:4d:37:f3:7b:71:2c:7b:
01:08:dc:32:3c:fc:b7:f9:d9:0f:81:2c:b5:a9:97:
ec:fd:1b:bd:f9:ae:68:89:a5:a2:8e:4c:86:92:60:
3c:df:ac:86:8a:cb:fd:d7:0e:2d:71:e7:54:14:b5:
5c:82:e0:2f:1e:3d:36:31:d5:de:4a:96:8e:54:a8:
e9:d3:40:be:1e:f4:24:b9:01:8d:90:b7:54:55:15:
49:74:fd:f6:9e:84:4f:5c:b3:b3:b1:95:14:cc:9d:
31:ce:d5:50:8f:7e:0f:a6:e2:7d:91:ed:61:10:39:
77:67:f7:03:8a:1c:63:e4:6b:5d:11:fc:69:72:8e:
71:eb:b4:6b:c8:09:64:c0:1f:2f:2b:da:cb:df:e0:
03:f7:eb:c2:09:bd:f0:df:ef:47:03:53:8d:b7:fe:
41:49:ab:e7:39:c4:c2:e5:92:7f:8f:9a:29:55:79:
a1:53:6f:18:72:40:29:64:06:ac:2a:75:6b:8a:fd:
d1:3f:a0:7e:bc:9e:a6:51:b2:8a:f6:2c:aa:3b:13:
46:6a:ac:04:4f:c9:59:0a:80:32:2e:9a:b6:aa:50:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141163
sbgp-ipAddrBlock: critical
IPv4:
103.155.142.0/23
IPv6:
2406:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
23:48:b8:a9:67:8f:6c:40:68:7f:e6:0a:d1:38:b1:66:a8:bd:
02:92:5e:1a:36:44:55:61:68:8e:bb:1e:b4:e8:70:92:91:e3:
66:64:ec:37:f3:61:bd:60:06:33:ad:3c:cd:06:57:43:db:53:
c6:bd:e4:16:76:3f:64:0a:51:80:4a:92:95:14:8c:09:e9:60:
1c:ab:c8:95:a2:b7:f7:2b:13:47:e0:91:e6:c0:4f:f3:f3:10:
26:05:cf:d3:d6:aa:1a:6c:b6:bd:ed:2f:5b:5c:05:c1:5b:cd:
f0:c9:51:e1:91:ac:05:af:5f:7a:35:bc:a3:c5:50:8f:a1:8b:
9c:aa:f2:4e:6f:9f:78:8b:a5:58:e9:61:e4:9f:05:d9:72:af:
f5:bf:4b:98:bb:d3:b1:8c:38:2d:f9:09:21:6f:bf:f2:1e:fa:
70:06:1a:bd:45:c2:c9:e8:ca:d5:16:bc:3d:be:33:d2:2f:98:
30:1b:46:86:54:5c:fd:75:c2:b2:df:bb:ce:d8:5f:ef:7b:8a:
5d:ed:ae:b6:81:34:d1:7b:b1:aa:90:c5:1d:7c:4c:f0:a8:9f:
9c:f2:7f:f7:20:cd:11:4e:76:12:6a:3d:40:7e:e0:4d:02:66:
96:1c:21:af:e2:1a:6a:16:a3:b0:3f:44:87:1e:5a:e3:fa:1c:
92:fd:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:29:10 2026 by rpki-client