Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
File: CC8e6S_qY3P9odWuxG4vLYrorIc.cer (raw, json)
Hash identifier: y0R6v1JDUmhQviS/Ki8oP+QMcUN/PzpK/o1QXZEPpcE=
Subject key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6915
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 20:21:49 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 164.100.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26901 (0x6915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 29 20:21:49 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:9a:08:7b:d3:75:be:2a:a3:48:ac:8f:45:
1d:3f:76:7f:ad:75:27:53:a2:88:fc:db:17:29:9c:
2a:31:e0:25:6a:d8:94:27:d3:b2:eb:4f:80:b1:27:
18:0a:82:d2:b1:66:db:c2:d7:a9:27:cf:a6:ea:58:
7a:07:b3:ce:1f:9e:a4:fc:0b:4d:5f:ee:7a:b9:7c:
7f:d8:fb:f5:31:f6:98:52:14:5f:c2:80:04:e0:a3:
9d:2a:87:1b:fa:68:90:63:d0:c1:9c:15:92:3a:9d:
95:59:4c:7a:49:cf:97:3a:d7:fa:a7:66:56:8f:09:
1c:60:37:17:b9:72:f7:1c:8a:bc:0a:a6:51:e3:fe:
cb:a4:cf:bc:ab:db:3e:06:6f:f7:29:3f:ae:e9:2c:
f0:a8:2c:e5:13:8d:00:4c:25:3a:50:b8:70:f7:45:
b0:6b:3a:7c:50:c8:4e:3f:42:d0:61:43:d9:9f:39:
6a:03:a3:8b:01:fc:36:47:eb:0f:85:b3:ff:ee:a6:
42:72:f4:6b:cc:dd:e2:17:98:e0:fa:f3:32:fa:a0:
c7:9b:1b:bf:94:07:8b:23:4d:7b:dd:31:6a:73:5f:
e6:a4:1a:68:63:ab:d0:ce:48:11:5a:9d:6a:cb:ec:
6b:10:93:89:e9:0c:35:d2:b9:f3:95:b1:8d:c4:7e:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:f5:e3:33:95:c3:e0:24:f6:a9:ac:60:17:ad:d2:af:13:b3:
8b:c5:51:78:5b:79:fe:ef:bc:a0:06:7a:e3:0c:2e:8a:cc:3f:
4d:e2:2b:d8:bc:ba:94:c7:b5:3b:98:47:1a:e2:4e:a2:de:c2:
e4:52:26:d0:c0:30:35:92:dd:8a:cf:72:61:10:39:2c:7a:3a:
44:36:a2:10:52:2e:85:e7:84:78:b6:98:ac:38:6a:c0:3e:3c:
f2:0d:21:44:90:e2:c4:cc:85:5e:3a:92:c2:f8:57:94:45:25:
c2:7b:60:23:18:06:00:23:94:0a:71:48:2d:01:94:28:b8:9f:
4c:66:48:a7:9d:4c:af:42:e8:79:73:1f:f3:1a:a4:2f:66:37:
99:bf:ea:ff:22:45:6d:d6:5f:54:62:6a:32:c1:9c:5f:63:ba:
0f:0f:5a:23:30:39:5f:64:f5:13:e8:e3:ec:bc:43:1d:4c:10:
bc:61:fe:fe:03:bc:f1:51:b2:a2:c4:52:aa:78:11:c5:4a:ab:
49:3b:c4:b0:ff:08:17:54:96:d6:86:79:6f:79:02:10:9d:97:
0f:65:8c:0b:72:66:92:89:79:6a:88:86:ea:a3:fa:16:72:85:
b2:10:76:65:9a:6e:c8:c1:bb:87:f8:5a:f9:4e:18:05:3d:64:
bd:a6:6a:e9
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICaRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNzI5MjAyMTQ5WhcNMjYwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RjBEQTExMC8GA1UEBRMoMDgyRjFFRTkyRkVBNjM3M0ZEQTFENUFF
QzQ2RTJGMkQ4QUU4QUM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKllmgh703W+KqNIrI9FHT92f611J1OiiPzbFymcKjHgJWrYlCfTsutPgLEnGAqC
0rFm28LXqSfPpupYegezzh+epPwLTV/uerl8f9j79TH2mFIUX8KABOCjnSqHG/po
kGPQwZwVkjqdlVlMeknPlzrX+qdmVo8JHGA3F7ly9xyKvAqmUeP+y6TPvKvbPgZv
9yk/ruks8Kgs5RONAEwlOlC4cPdFsGs6fFDITj9C0GFD2Z85agOjiwH8NkfrD4Wz
/+6mQnL0a8zd4heY4PrzMvqgx5sbv5QHiyNNe90xanNf5qQaaGOr0M5IEVqdasvs
axCTiekMNdK585WxjcR+XDUCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQILx7pL+pj
c/2h1a7Ebi8tiuishzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYwREEvRkM2MUUwMDgxRDY3MTFFMjhDMTgyOEE0MDhCMDJDRDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGMERBL0ZDNjFFMDA4MUQ2NzExRTI4QzE4MjhBNDA4QjAyQ0QyL0NDOGU2U19x
WTNQOW9kV3V4RzR2TFlyb3JJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAKRkMA0GCSqGSIb3DQEBCwUAA4IBAQCQ9eMzlcPgJPaprGAXrdKv
E7OLxVF4W3n+77ygBnrjDC6KzD9N4ivYvLqUx7U7mEca4k6i3sLkUibQwDA1kt2K
z3JhEDksejpENqIQUi6F54R4tpisOGrAPjzyDSFEkOLEzIVeOpLC+FeURSXCe2Aj
GAYAI5QKcUgtAZQouJ9MZkinnUyvQuh5cx/zGqQvZjeZv+r/IkVt1l9UYmoywZxf
Y7oPD1ojMDlfZPUT6OPsvEMdTBC8Yf7+A7zxUbKixFKqeBHFSqtJO8Sw/wgXVJbW
hnlveQIQnZcPZYwLcmaSiXlqiIbqo/oWcoWyEHZlmm7IwbuH+Fr5ThgFPWS9pmrp
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:52:42 2025 by rpki-client