Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
File: v1WlsAYqTmo9yHnjyfyyZnxokrc.cer (raw, json)
Hash identifier: XAv1tlyXMWiPGhZsk17RDv097nuJLaIFhGOEVta9gmc=
Subject key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02721B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 16:52:16 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138209
IP: 103.129.224.0/22
IP: 2403:8ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160283 (0x2721b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 16:52:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:32:52:48:e1:af:6b:ac:f6:65:07:a9:4a:
ff:11:a6:57:3a:db:24:84:06:93:b9:76:d9:35:a0:
cc:6c:8b:90:33:15:0c:cb:1b:38:bf:aa:f9:e3:ef:
66:b7:10:df:c5:28:37:bc:97:8c:9e:95:c8:87:fa:
43:37:10:2b:b7:10:41:fc:2a:82:10:bb:4b:b7:c7:
b8:56:06:52:1c:e2:24:db:2f:28:09:08:eb:2a:c3:
2c:df:6f:41:44:8f:24:26:03:f2:53:47:df:65:b9:
59:9b:dc:61:1b:cc:dd:6e:f8:0e:52:85:86:51:4c:
74:26:26:0a:21:a4:2e:dc:3e:8c:91:55:19:78:3d:
6a:c6:eb:1f:71:fd:54:61:24:da:b9:da:08:e1:2b:
9f:9d:c9:ac:48:7e:c3:ae:d2:a7:e8:ea:16:63:73:
82:20:36:07:5a:88:96:74:69:dd:07:80:aa:af:58:
c4:8b:e3:49:19:31:48:88:e2:65:65:39:0e:bb:c3:
84:28:77:86:89:a9:ec:90:9a:c3:0d:45:28:19:dc:
8f:02:01:83:c1:e8:50:e7:20:6c:4b:0a:f7:f6:58:
86:71:da:9c:8d:73:a7:a5:44:9e:ea:56:5e:47:10:
03:4f:b2:74:60:74:53:be:60:3e:b4:ac:5c:07:06:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138209
sbgp-ipAddrBlock: critical
IPv4:
103.129.224.0/22
IPv6:
2403:8ac0::/32
Signature Algorithm: sha256WithRSAEncryption
c5:9b:50:8b:d4:37:ec:6c:2a:ce:d1:7a:69:f4:40:7b:90:8b:
75:07:fe:21:f4:c9:91:43:74:3c:8e:26:db:25:51:74:9f:89:
d7:d5:d5:65:20:7a:a4:14:ae:ae:84:62:eb:e5:b5:64:aa:21:
4f:6d:40:2f:57:c6:3d:a9:d3:42:34:75:d6:5e:ff:bc:b9:ce:
bf:e1:5a:53:c8:d8:f7:46:4a:fe:fb:32:74:28:74:6f:d1:5d:
b0:49:3a:81:8b:b3:77:fe:91:5b:a3:2d:92:21:20:2b:9e:26:
ab:97:7b:2c:16:2a:28:6c:72:63:d2:a0:fc:88:80:db:98:08:
ef:83:71:d1:a4:9b:b9:5b:1f:f0:8c:7f:f6:6a:5d:e0:8d:f6:
3e:eb:66:a4:2b:13:3c:9b:f7:f6:a3:1b:16:62:7b:97:11:f4:
34:27:a6:f4:d2:59:46:64:b3:51:d0:b3:84:80:6e:2d:4d:43:
6b:ab:31:2a:b5:f5:c3:9c:69:ca:24:19:d6:5d:b2:6e:73:73:
51:5b:7a:49:16:02:d0:bd:ce:5c:2e:56:47:bc:f6:db:96:d2:
f6:b4:d9:99:f4:d9:9d:20:4e:d7:20:bf:23:ce:b1:04:d7:f3:
c3:51:c1:39:c6:fe:19:50:27:79:48:43:75:66:8c:10:13:5e:
91:58:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:12:13 2025 by rpki-client