Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/c8Mme8SMmzk0ep8yp9O0D59yiVg.cer
File: c8Mme8SMmzk0ep8yp9O0D59yiVg.cer (raw, json)
Hash identifier: Hw21cT9gq8rxyAhxjIqOkDgSqMP0qhjeaI3x0DRVkuE=
Subject key identifier: 73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4CFD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 19 Aug 2025 02:06:35 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 57.176.0.0/15
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19709 (0x4cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 19 02:06:35 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9162E3D0000, serialNumber=73C3267BC48C9B39347A9F32A7D3B40F9F728958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:ee:8c:64:e8:c6:79:4a:d3:28:73:34:55:
99:e3:eb:ab:93:6b:6b:32:6b:06:57:64:c7:6e:4c:
ee:f8:8f:21:46:ab:c4:03:77:96:4c:49:c3:19:63:
be:30:97:36:17:24:77:0d:29:60:5b:a5:f0:83:b3:
ed:ca:a7:e1:c8:75:27:d9:3f:19:07:54:07:b7:5b:
db:89:e7:64:37:21:bb:93:9a:18:da:ee:22:a9:15:
c6:20:2c:f0:6b:eb:9a:0b:7c:d6:d6:74:0d:a6:b0:
08:95:a5:3f:80:c4:82:0f:80:a3:b2:8a:b7:c9:50:
f4:ff:f5:fb:69:a3:75:e7:65:41:5a:60:8c:ef:24:
a5:4c:e3:0f:3f:2d:9a:bc:93:09:a5:07:57:1f:55:
9e:32:4e:1b:e8:6f:3c:d7:17:a5:87:39:2a:77:e4:
d1:c4:bd:fb:bc:ca:ec:0e:9e:9a:cb:fb:87:98:1d:
7f:9e:87:f9:f3:a9:93:ea:66:d6:75:84:8b:ea:d4:
2f:7d:6c:d8:04:a4:de:61:45:76:71:d6:41:e0:df:
70:2c:92:26:8b:8b:a5:b9:f3:04:45:63:07:3b:b1:
c3:08:b7:1f:05:2d:e6:91:c8:a4:62:34:36:bd:52:
70:f3:f6:2b:b0:1f:5d:f9:a4:cb:5b:95:8b:20:3f:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
57.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c8:ac:2c:a4:14:6e:a6:47:f4:7f:b8:e5:61:e4:46:4c:df:cc:
b8:a9:29:78:c1:92:bb:be:fd:f1:d0:fe:f7:9b:5d:1e:1f:7f:
2e:6a:7e:eb:23:38:96:f3:b0:ca:35:11:65:9c:e4:18:fb:0c:
ad:1a:c6:7a:0c:cf:3f:a9:c6:50:72:cc:f6:5a:23:b7:e2:2e:
ee:c3:ef:1f:94:92:c7:13:97:55:8f:84:6f:ff:06:3f:c5:9e:
31:05:c2:08:20:35:c9:33:36:0c:a8:38:34:54:e9:7b:97:74:
62:1d:e1:45:d0:b5:35:88:e3:1e:c5:8c:7c:55:07:0a:d7:81:
ee:ca:01:5a:63:51:47:47:92:95:32:38:4a:ff:2b:b0:cb:0f:
e3:b2:e2:ab:10:57:cc:4a:4f:40:a4:23:c5:a1:d5:54:8c:c5:
84:be:40:36:b5:df:61:af:e3:07:ba:d7:69:ac:b4:76:51:c1:
e9:dd:19:7c:a5:cf:2b:6b:5c:db:46:77:cb:56:f4:15:c3:fb:
eb:94:02:79:43:40:de:e9:74:e7:a1:e6:71:bd:7b:11:b5:65:
59:33:76:74:10:d6:a7:9e:38:2d:d1:a5:32:b5:a2:16:35:1c:
ef:58:b4:49:62:69:cf:cf:97:ed:e1:60:94:95:4b:4f:e2:f4:
9e:d8:bc:e2
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgICTP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwODE5MDIwNjM1WhcNMjYwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTE2MkUzRDAwMDAxMTAvBgNVBAUTKDczQzMyNjdCQzQ4QzlCMzkzNDdB
OUYzMkE3RDNCNDBGOUY3Mjg5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdpu6MZOjGeUrTKHM0VZnj66uTa2syawZXZMduTO74jyFGq8QDd5ZMScMZ
Y74wlzYXJHcNKWBbpfCDs+3Kp+HIdSfZPxkHVAe3W9uJ52Q3IbuTmhja7iKpFcYg
LPBr65oLfNbWdA2msAiVpT+AxIIPgKOyirfJUPT/9ftpo3XnZUFaYIzvJKVM4w8/
LZq8kwmlB1cfVZ4yThvobzzXF6WHOSp35NHEvfu8yuwOnprL+4eYHX+eh/nzqZPq
ZtZ1hIvq1C99bNgEpN5hRXZx1kHg33AskiaLi6W58wRFYwc7scMItx8FLeaRyKRi
NDa9UnDz9iuwH135pMtblYsgPwgPAgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUc8Mm
e8SMmzk0ep8yp9O0D59yiVgwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgc4GCCsGAQUFBwELBIHBMIG+MDQGCCsGAQUF
BzAFhihyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMFMG
CCsGAQUFBzAKhkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAw
MDAvYzhNbWU4U01temswZXA4eXA5TzBENTl5aVZnLm1mdDAxBggrBgEFBQcwDYYl
aHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcB
BwEB/wQPMA0wCwQCAAEwBQMDATmwMA0GCSqGSIb3DQEBCwUAA4IBAQDIrCykFG6m
R/R/uOVh5EZM38y4qSl4wZK7vv3x0P73m10eH38uan7rIziW87DKNRFlnOQY+wyt
GsZ6DM8/qcZQcsz2WiO34i7uw+8flJLHE5dVj4Rv/wY/xZ4xBcIIIDXJMzYMqDg0
VOl7l3RiHeFF0LU1iOMexYx8VQcK14HuygFaY1FHR5KVMjhK/yuwyw/jsuKrEFfM
Sk9ApCPFodVUjMWEvkA2td9hr+MHutdprLR2UcHp3Rl8pc8ra1zbRnfLVvQVw/vr
lAJ5Q0De6XTnoeZxvXsRtWVZM3Z0ENannjgt0aUytaIWNRzvWLRJYmnPz5ft4WCU
lUtP4vSe2Lzi
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:13 2025 by rpki-client