Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer (raw, json)
Hash identifier: y4V9TTarfsU4sVo4yNOhEi81Q1zEuxHI6uMVm2CNqg8=
Subject key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025784
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Jul 2025 16:21:53 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 131448
IP: 103.69.136.0/22
IP: 116.66.180.0/22
IP: 2405:ef80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153476 (0x25784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 16:21:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:23:bf:a6:99:78:00:2c:9a:63:80:a9:04:
9b:dd:95:6c:80:25:9a:cc:89:da:83:f0:d5:45:d2:
36:c2:96:a4:50:d3:05:6f:17:3d:85:ee:91:a5:48:
80:91:2b:99:6c:52:97:2e:5b:62:85:89:29:0f:df:
66:fc:15:7f:26:b0:07:b6:ad:d7:58:e3:96:5f:c4:
64:89:9d:c1:12:e1:b7:11:9c:64:7f:63:b9:dc:b2:
f9:f0:3c:80:ea:b3:3d:b9:9f:07:24:7f:e8:53:dc:
51:0c:07:68:23:2b:b1:4e:2b:53:76:2c:b4:e3:03:
a6:2a:8d:35:11:ef:08:a4:50:e1:e3:eb:0d:8a:5f:
73:83:5c:cf:ec:de:45:f9:a4:b1:8d:8f:79:87:a2:
31:12:ed:f3:7e:8e:fc:8c:42:26:1a:24:67:73:0a:
7e:63:c6:3d:fb:d8:2f:40:5a:1e:1d:cd:95:76:8a:
7f:6a:ee:58:be:84:33:9a:ad:64:ed:e4:a4:ec:8a:
c1:84:e7:d5:fa:53:39:a9:01:69:ce:52:8b:ac:9b:
3f:60:75:e4:03:01:59:75:f5:ce:84:22:40:95:1b:
26:99:b1:ef:8b:a8:a8:fa:26:0a:b7:13:cf:cd:b0:
e3:6c:f4:7a:4e:c2:9f:7e:a2:4d:ff:97:e1:1a:4d:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131448
sbgp-ipAddrBlock: critical
IPv4:
103.69.136.0/22
116.66.180.0/22
IPv6:
2405:ef80::/32
Signature Algorithm: sha256WithRSAEncryption
bc:10:0d:06:24:28:67:8f:40:87:91:bb:74:e6:bc:c0:e7:5d:
16:11:cb:e8:14:5a:fe:6f:b8:23:de:93:30:40:b7:e0:cf:6f:
19:6c:ef:b2:c7:b2:8f:7a:71:69:7f:77:81:d9:9d:89:17:23:
0a:30:9f:38:30:4a:b0:88:ba:1f:13:ba:fe:49:cc:94:50:90:
9c:d3:e2:d3:b7:91:9e:b8:2e:f9:3f:9d:09:fe:0d:00:69:76:
2a:6a:33:42:fc:99:32:63:d4:64:98:f1:a2:3f:41:83:b9:b3:
6b:16:82:91:68:b0:08:7f:89:49:d2:34:29:37:03:55:85:43:
f9:aa:39:ba:a6:ff:e1:10:4d:44:39:bb:5b:fa:d3:b1:6e:7f:
17:f7:4f:1f:52:57:b3:6b:a6:c7:5b:7a:41:9a:39:98:d0:fe:
6d:ea:27:b4:15:d2:11:1f:57:ad:09:9a:96:cf:b9:70:35:ba:
71:3d:08:4c:7a:0b:8a:4c:24:62:fd:32:d1:f0:b8:a6:28:d5:
3d:db:2c:12:09:98:61:95:82:ab:d3:1b:0f:13:ef:e9:b0:c2:
9c:79:e4:ce:c0:df:4c:59:cc:58:4a:6d:a8:60:f3:1e:0f:4e:
88:e4:63:95:78:ed:61:a8:f8:7b:7e:a9:d6:3f:e5:3f:51:c0:
78:58:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:25:28 2025 by rpki-client