Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
File: CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer (raw, json)
Hash identifier: U9GdDA7/f507ZD0x580S9ko2UYkWvNXJf5fXJQQRrgU=
Subject key identifier: 08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8043
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 13:48:51 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.233.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32835 (0x8043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 13:48:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9155C10, serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:d0:b8:97:1f:b3:10:69:8a:b2:33:c9:39:
5a:23:9e:1b:ec:36:ce:65:02:5a:61:0f:3b:b6:4e:
b4:89:e4:ee:6e:9b:88:2c:96:df:2a:08:a1:20:89:
39:b4:10:b8:24:11:9a:2f:81:b1:8d:82:5c:57:cf:
0f:95:6d:b4:2e:6d:75:15:fb:de:10:5d:06:56:3c:
3c:9a:b3:04:87:1b:11:f8:44:bc:f3:0c:c3:f9:da:
a9:fe:a3:1b:28:4d:9a:2b:8d:fd:74:0c:3d:f2:38:
b8:19:5c:51:19:64:50:99:fe:39:fb:96:f2:0d:8c:
ef:54:07:99:44:1d:02:02:56:b6:4e:56:97:89:30:
b2:a7:bb:b1:31:23:2d:ab:80:c3:d6:58:0d:34:40:
4e:29:c3:1c:fc:b9:9c:7c:3d:1a:a8:98:ac:bf:21:
4c:61:3c:43:f5:9c:9a:1b:b0:93:9b:ac:ab:9a:80:
5e:ad:c3:48:dd:ea:5d:dd:b9:3c:62:2e:ca:d4:2d:
b4:49:50:7f:07:ae:b3:22:11:dc:9d:c7:26:45:63:
6d:ec:bb:da:6b:d3:89:20:df:8f:cb:9c:8d:d2:e8:
f2:4f:d9:dd:aa:45:17:c3:54:48:f1:4c:7c:6b:9b:
9c:f4:70:23:1f:43:7c:af:a3:ef:80:ee:a1:73:11:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:82:1d:05:a7:eb:1b:e7:7b:f9:44:45:f7:8d:36:26:46:7c:
af:80:c7:b9:42:1f:8e:1b:f2:a5:62:9f:68:a1:fd:a1:0c:9a:
0b:f1:75:5b:1f:4e:fa:c4:4f:bf:10:60:ea:fe:3a:df:1f:2e:
92:f9:9a:bd:cb:56:d0:da:c5:cf:6a:41:1a:09:93:30:0f:04:
0e:bf:de:0b:92:b9:77:1e:8c:b4:51:c5:98:a6:1e:46:44:86:
b6:71:3f:2e:27:87:68:6f:a1:d9:86:64:a1:e8:c8:c6:e3:6a:
30:97:01:62:d3:cb:d4:77:02:06:e4:28:dc:ef:41:26:6f:61:
b7:ff:86:35:ab:a5:ee:d1:4b:b1:ed:c7:57:88:dd:31:82:45:
98:13:08:84:a0:c8:57:50:8c:fa:73:de:8c:2c:ff:7a:bd:ed:
b0:51:a0:ae:ae:5e:03:26:30:f7:6b:df:2f:99:5e:05:a6:98:
1b:b4:87:f1:f8:ed:c9:7f:95:0c:33:3a:69:a8:e8:af:7c:c0:
28:cf:10:eb:17:12:e5:da:b6:07:5c:8d:86:5a:35:2d:35:87:
32:b1:ce:9b:a0:25:a5:91:bb:de:72:9e:e5:ec:02:6b:6e:92:
05:d4:29:93:2c:4b:87:0a:dc:a2:a1:d3:3b:f9:ce:38:e9:08:
65:ff:1e:4d
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIBDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgwNTEzNDg1MVoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVDMTAxMTAvBgNVBAUTKDA4MjkwRTlFRUYwMzMzRDJFNEJGNUNF
RTdCQzBFMjM5OTgxRTM1NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAhNC4lx+zEGmKsjPJOVojnhvsNs5lAlphDzu2TrSJ5O5um4gslt8qCKEgiTm0
ELgkEZovgbGNglxXzw+VbbQubXUV+94QXQZWPDyaswSHGxH4RLzzDMP52qn+oxso
TZorjf10DD3yOLgZXFEZZFCZ/jn7lvINjO9UB5lEHQICVrZOVpeJMLKnu7ExIy2r
gMPWWA00QE4pwxz8uZx8PRqomKy/IUxhPEP1nJobsJObrKuagF6tw0jd6l3duTxi
LsrULbRJUH8HrrMiEdydxyZFY23su9pr04kg34/LnI3S6PJP2d2qRRfDVEjxTHxr
m5z0cCMfQ3yvo++A7qFzERJVAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUCCkOnu8D
M9Lkv1zue8DiOZgeNU8wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1QzEwLzYxNzkyRTYyOTBENDExRjE4QzVFNTQzRjQyMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NUMxMC82MTc5MkU2MjkwRDQxMUYxOEM1RTU0M0Y0MjExRjk3MC9DQ2tPbnU4
RE05TGt2MXp1ZThEaU9aZ2VOVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACg7OkwDQYJKoZIhvcNAQELBQADggEBAG6CHQWn6xvne/lERfeN
NiZGfK+Ax7lCH44b8qVin2ih/aEMmgvxdVsfTvrET78QYOr+Ot8fLpL5mr3LVtDa
xc9qQRoJkzAPBA6/3guSuXcejLRRxZimHkZEhrZxPy4nh2hvodmGZKHoyMbjajCX
AWLTy9R3AgbkKNzvQSZvYbf/hjWrpe7RS7Htx1eI3TGCRZgTCISgyFdQjPpz3ows
/3q97bBRoK6uXgMmMPdr3y+ZXgWmmBu0h/H47cl/lQwzOmmo6K98wCjPEOsXEuXa
tgdcjYZaNS01hzKxzpugJaWRu95ynuXsAmtukgXUKZMsS4cK3KKh0zv5zjjpCGX/
Hk0=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:47 2026 by rpki-client