Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
File: CC8e6S_qY3P9odWuxG4vLYrorIc.cer (raw, json)
Hash identifier: 4MREla1WapY0EpjTOW6BPTGKzHbXBf1t+lSrIDJtUy4=
Subject key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8070
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Aug 2026 13:26:54 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 164.100.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32880 (0x8070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 7 13:26:54 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:9a:08:7b:d3:75:be:2a:a3:48:ac:8f:45:
1d:3f:76:7f:ad:75:27:53:a2:88:fc:db:17:29:9c:
2a:31:e0:25:6a:d8:94:27:d3:b2:eb:4f:80:b1:27:
18:0a:82:d2:b1:66:db:c2:d7:a9:27:cf:a6:ea:58:
7a:07:b3:ce:1f:9e:a4:fc:0b:4d:5f:ee:7a:b9:7c:
7f:d8:fb:f5:31:f6:98:52:14:5f:c2:80:04:e0:a3:
9d:2a:87:1b:fa:68:90:63:d0:c1:9c:15:92:3a:9d:
95:59:4c:7a:49:cf:97:3a:d7:fa:a7:66:56:8f:09:
1c:60:37:17:b9:72:f7:1c:8a:bc:0a:a6:51:e3:fe:
cb:a4:cf:bc:ab:db:3e:06:6f:f7:29:3f:ae:e9:2c:
f0:a8:2c:e5:13:8d:00:4c:25:3a:50:b8:70:f7:45:
b0:6b:3a:7c:50:c8:4e:3f:42:d0:61:43:d9:9f:39:
6a:03:a3:8b:01:fc:36:47:eb:0f:85:b3:ff:ee:a6:
42:72:f4:6b:cc:dd:e2:17:98:e0:fa:f3:32:fa:a0:
c7:9b:1b:bf:94:07:8b:23:4d:7b:dd:31:6a:73:5f:
e6:a4:1a:68:63:ab:d0:ce:48:11:5a:9d:6a:cb:ec:
6b:10:93:89:e9:0c:35:d2:b9:f3:95:b1:8d:c4:7e:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:72:d4:80:a0:63:3e:e9:00:5f:20:c9:e6:e7:a7:cc:cd:2a:
6f:94:29:c7:c1:94:75:1a:9e:99:7b:88:18:ee:f6:21:2a:c6:
2f:32:57:75:34:c7:29:f2:ad:63:81:4e:1e:a9:f6:b3:5c:08:
7c:1f:ef:78:93:64:e5:4f:d8:bf:fa:f7:79:ed:26:19:b9:31:
2e:fa:6a:c7:1e:48:5e:22:e5:d4:69:6f:03:a0:34:e0:cf:8b:
9f:a9:76:a6:54:8d:19:ac:29:55:aa:e8:bd:07:05:e3:ad:e0:
b7:65:42:57:a7:a1:76:81:55:35:77:7c:79:bb:33:d0:ff:1a:
ef:25:c7:e7:72:a9:75:69:5f:85:53:97:98:f1:34:57:45:ac:
4f:e3:15:6a:54:01:77:bb:27:35:2c:b4:80:42:4b:d3:44:f5:
de:0b:4b:be:95:32:45:81:b2:16:e4:ec:49:2f:10:50:8c:f8:
24:ec:6c:f3:79:5d:0b:8c:c9:54:62:8d:d4:db:02:91:0a:3f:
49:ca:d3:9c:6e:db:9d:9b:91:49:3c:78:5e:61:81:f1:fc:72:
81:1d:85:6f:92:d6:82:94:3d:1c:c5:8f:89:96:81:1d:8e:de:
6f:2a:36:69:e7:fd:59:c5:38:46:f0:5a:4f:a8:2b:f4:11:d3:
e0:5c:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:26 2026 by rpki-client