Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File: wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier: OAQ8g/ccEIn3BtsSLIi1+Bhv/KqOMZ5+82KC/f3C3Mo=
Subject key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0257A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Jul 2025 09:22:22 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 59117
AS: 135074
IP: 103.135.208.0/22
IP: 103.172.110.0/23
IP: 103.204.13.0/24
IP: 203.168.128.0/22
IP: 203.168.192.0/20
IP: 2001:df7:6e80::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 00:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153504 (0x257a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 24 09:22:22 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59117
135074
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
103.204.13.0/24
203.168.128.0/22
203.168.192.0/20
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
63:f7:15:49:d3:56:68:50:6e:d2:a7:99:94:2e:0d:25:e1:64:
56:55:28:6f:fc:b1:d1:8c:16:3d:aa:2c:f1:33:4e:61:9f:e7:
a9:16:53:ba:b9:67:d3:21:4f:76:4b:18:cf:5e:68:d7:03:7e:
f6:52:a3:b2:5d:8f:20:96:dc:3c:33:e1:ec:29:19:09:35:e5:
3e:d3:03:ba:09:53:13:ac:5a:79:bf:0b:91:29:c2:12:d9:cf:
39:61:53:ea:de:89:18:3a:80:89:e4:c8:48:47:c7:3c:50:df:
24:3a:73:be:a0:d0:39:6a:b2:1b:85:f3:d1:65:3f:30:b2:5b:
e1:6f:d2:0a:d6:d9:da:fd:a0:f6:25:82:a3:7b:99:34:ad:49:
7b:e8:2f:32:f4:77:de:51:57:c8:14:83:cd:47:9d:58:31:e5:
69:68:7c:15:d9:46:21:19:86:9b:44:90:9f:b4:66:26:8b:b9:
28:0b:8b:03:1e:1b:43:1a:76:77:92:5d:d7:3e:c3:7e:ce:30:
be:37:2b:da:cc:da:e2:da:91:3d:3d:25:c0:47:80:19:e9:cd:
ca:fe:19:40:a0:dc:29:ab:16:04:a6:46:52:e1:28:b8:3b:8a:
28:73:34:ed:79:98:3d:89:93:f5:63:4e:4e:6d:ca:ee:78:71:
de:5e:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:59:24 2025 by rpki-client