Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
File: h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer (raw, json)
Hash identifier: vAyeGi2xXfrNYKPyO2b5BYR1Em74IvVlEZfDFg9W3Tc=
Subject key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5436
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 07 Jul 2026 01:09:21 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 57.176.0.0/15
IP: 151.158.78.0 -- 151.158.81.255
IP: 151.158.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21558 (0x5436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 7 01:09:21 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:f0:52:f1:cb:fe:fc:5c:68:d4:5d:59:52:
ab:0b:e1:d0:b2:f3:19:a3:f9:5e:73:e0:50:9c:05:
ba:81:32:79:83:55:2d:f0:34:3e:7a:84:52:c3:25:
be:75:dd:eb:69:3d:31:ef:6c:56:04:16:9c:a1:d7:
0d:6b:27:97:89:4c:90:55:1d:50:ec:55:7d:26:c8:
72:58:5b:53:4a:84:1f:fc:6c:d2:11:00:e3:04:a1:
af:49:0f:fe:31:0c:60:02:4d:ec:33:1e:69:5b:fb:
2c:80:a2:53:8e:1f:28:35:fb:84:5f:d5:22:1c:fc:
9d:94:9e:b8:25:46:c4:d0:7e:bc:ef:e0:81:d9:51:
5c:66:23:2b:5c:a6:d7:2c:74:f7:0b:4f:a2:b1:60:
81:80:2c:2e:57:2b:bd:a3:f6:6d:a7:71:27:88:dc:
54:6c:b7:04:bc:e8:3f:a2:be:73:e1:e1:1c:e5:af:
1e:be:d5:a8:f0:20:0c:3f:b9:93:37:3b:4b:19:d7:
8d:fb:b9:7e:20:bf:24:78:94:ed:36:4d:ac:ef:f6:
45:e3:88:f9:e3:6f:ef:87:f1:cb:44:34:f8:c6:55:
27:74:bb:b1:a3:a8:d5:00:cc:d6:d3:fe:7d:8d:7e:
0a:71:69:62:84:4d:d0:cd:25:3d:1b:ed:c1:90:02:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
57.176.0.0/15
151.158.78.0-151.158.81.255
151.158.122.0/23
Signature Algorithm: sha256WithRSAEncryption
00:2f:76:54:e8:8c:75:f8:cb:b2:fd:ab:8b:ce:d8:4e:16:e1:
bb:13:62:c8:c8:46:fb:a6:f6:3e:22:2b:03:4c:a3:fb:55:15:
b9:d8:5a:6e:57:1b:f8:8a:8d:00:ae:78:c8:fe:23:52:bb:af:
c3:5d:32:86:89:60:42:9d:7c:58:7d:f6:a0:33:c4:32:99:d8:
00:2f:8d:9a:48:6a:c2:14:e6:00:6e:d7:9b:2f:0e:bd:ae:ec:
76:d3:27:c5:5a:d0:f2:4f:73:7b:97:cd:19:35:37:5a:53:5b:
51:29:bc:bd:3d:af:57:9f:29:51:5c:f9:0c:c2:30:ce:94:e8:
fe:77:dd:d0:8c:e3:11:74:9a:4b:41:04:43:a4:98:b3:ad:b5:
43:4d:4f:a5:da:2d:97:3f:2f:dd:b7:85:e5:64:06:82:df:f5:
98:c6:31:6a:c2:51:1f:c8:7c:3c:3d:17:88:36:0e:31:e0:d3:
ef:25:fa:cd:77:e0:c8:1b:34:81:87:27:7c:8d:fd:bc:90:b7:
f4:95:c5:43:4a:86:39:17:ca:16:c5:7a:be:07:6f:0d:72:c0:
3c:a2:47:64:30:24:c8:97:eb:d8:7e:ac:05:bc:34:0f:0f:be:
ed:7e:8f:fc:14:c6:e1:aa:21:ff:51:63:78:b9:6a:fd:98:bf:
c5:07:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:56 2026 by rpki-client