Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
File: h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer (raw, json)
Hash identifier: zOMPO3KCXd6DGx5CTqEnse0VKL5R+5uDB3GPKur5NDc=
Subject key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 54FF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 03:18:59 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 57.176.0.0/15
IP: 151.158.78.0 -- 151.158.81.255
IP: 151.158.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21759 (0x54ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 25 03:18:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:f0:52:f1:cb:fe:fc:5c:68:d4:5d:59:52:
ab:0b:e1:d0:b2:f3:19:a3:f9:5e:73:e0:50:9c:05:
ba:81:32:79:83:55:2d:f0:34:3e:7a:84:52:c3:25:
be:75:dd:eb:69:3d:31:ef:6c:56:04:16:9c:a1:d7:
0d:6b:27:97:89:4c:90:55:1d:50:ec:55:7d:26:c8:
72:58:5b:53:4a:84:1f:fc:6c:d2:11:00:e3:04:a1:
af:49:0f:fe:31:0c:60:02:4d:ec:33:1e:69:5b:fb:
2c:80:a2:53:8e:1f:28:35:fb:84:5f:d5:22:1c:fc:
9d:94:9e:b8:25:46:c4:d0:7e:bc:ef:e0:81:d9:51:
5c:66:23:2b:5c:a6:d7:2c:74:f7:0b:4f:a2:b1:60:
81:80:2c:2e:57:2b:bd:a3:f6:6d:a7:71:27:88:dc:
54:6c:b7:04:bc:e8:3f:a2:be:73:e1:e1:1c:e5:af:
1e:be:d5:a8:f0:20:0c:3f:b9:93:37:3b:4b:19:d7:
8d:fb:b9:7e:20:bf:24:78:94:ed:36:4d:ac:ef:f6:
45:e3:88:f9:e3:6f:ef:87:f1:cb:44:34:f8:c6:55:
27:74:bb:b1:a3:a8:d5:00:cc:d6:d3:fe:7d:8d:7e:
0a:71:69:62:84:4d:d0:cd:25:3d:1b:ed:c1:90:02:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
57.176.0.0/15
151.158.78.0-151.158.81.255
151.158.122.0/23
Signature Algorithm: sha256WithRSAEncryption
39:94:3a:29:3e:d3:45:e5:0d:f4:ed:a8:d0:e1:52:91:9c:93:
c7:5d:26:e6:8f:fd:64:d3:46:d4:93:aa:76:3d:6a:03:01:e0:
b4:dd:83:7c:6f:b4:dc:be:17:37:ac:c9:f8:53:2a:92:a0:c4:
af:17:88:75:8b:80:bd:b3:59:9b:73:51:53:59:0a:0d:96:3d:
4f:a9:3f:09:14:6c:79:01:2f:5b:77:e0:47:9b:2a:5d:b5:40:
73:06:5f:46:0d:80:89:57:f0:f5:21:65:8a:69:01:63:8f:ef:
af:d9:7a:00:f0:4d:e6:48:2b:3d:ff:c6:25:a9:22:a4:d4:70:
7c:07:a3:2c:94:d4:ad:fb:f3:6b:fb:42:4b:c8:7c:78:bf:99:
4b:45:e6:e0:85:1d:b3:d9:5a:62:53:97:0f:db:fc:bc:5a:49:
16:9e:eb:cf:17:70:62:39:2f:c5:dd:93:21:6c:03:e2:24:7e:
0f:85:44:3e:8a:b4:7e:69:61:cb:67:8b:40:73:05:52:3d:ca:
24:20:bc:9a:14:aa:59:ee:34:e3:e7:b4:04:93:fe:d5:37:64:
c8:ed:bc:1e:64:fb:06:8f:c4:ef:1f:af:f8:87:fe:3b:db:8c:
7f:7f:51:e7:30:8e:f7:86:36:d8:a8:fd:cb:b8:3a:ae:71:43:
09:00:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:37 2026 by rpki-client