Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
File: 6st7UPM43yeU66P2GMcjOyKD5kQ.cer (raw, json)
Hash identifier: Gec55S6KtbcD+bz/vhCdBFAnJQ3gRn6ySQOr1US0r48=
Subject key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82FE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 01 Oct 2026 05:07:26 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 139.170.0.0/16
IP: 139.208.0.0/13
IP: 139.226.0.0/15
IP: 140.206.0.0/15
IP: 157.0.0.0/16
IP: 157.18.0.0/16
IP: 157.61.0.0/16
IP: 157.122.0.0/16
IP: 157.148.0.0/16
IP: 157.156.0.0/16
IP: 157.255.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33534 (0x82fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 05:07:26 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:41:26:65:59:d3:c2:2c:51:50:ad:2b:71:
61:4f:1c:30:c7:25:9d:10:4f:ef:f6:c0:06:06:3c:
d9:9d:a3:c0:34:aa:f6:d9:49:db:6d:9c:14:00:78:
b5:83:79:72:57:6e:91:bf:62:fc:e0:3e:35:2c:f6:
62:e0:c0:a9:c3:4f:02:d8:8f:2e:11:eb:e2:2a:6a:
3a:24:bb:bc:68:ed:df:f6:8a:7c:83:b7:b5:88:3e:
9a:36:88:9e:11:2b:d0:19:5a:a5:93:68:13:48:f8:
49:5d:28:4e:b8:de:17:ae:06:9e:f7:4e:cf:f2:17:
67:8d:de:16:c3:41:f9:90:2d:5f:52:47:55:48:65:
de:b1:b2:1a:87:a6:05:23:a5:b7:63:f1:f4:ae:48:
38:84:1f:79:07:8f:3c:25:a9:ef:43:a2:4d:93:f6:
72:1d:b3:f3:4a:39:28:a5:c3:c6:a9:ae:9e:95:9d:
65:c6:aa:0c:cb:06:cd:1e:b5:a9:92:bf:85:e4:e7:
86:2b:8d:5e:cb:92:fe:7b:97:94:a1:9f:2d:1b:47:
e4:06:3e:ee:fa:89:ba:89:13:f7:90:d5:c1:15:0a:
d3:07:dd:65:92:b6:f3:eb:49:77:22:e1:58:e1:90:
b1:8a:c6:23:72:cd:4a:93:90:6e:f2:ff:85:be:b8:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.170.0.0/16
139.208.0.0/13
139.226.0.0/15
140.206.0.0/15
157.0.0.0/16
157.18.0.0/16
157.61.0.0/16
157.122.0.0/16
157.148.0.0/16
157.156.0.0/16
157.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:f5:4e:2b:59:49:e6:a6:9d:0a:25:55:7f:aa:81:38:2f:51:
0c:85:a8:a1:a1:75:4f:04:ee:38:52:00:9e:d1:84:e0:45:51:
74:9d:4e:e2:2e:4d:40:db:51:13:36:4a:b3:4c:1a:e9:3b:b1:
92:1d:f3:4d:66:b3:59:2b:e4:bf:71:18:87:1b:fc:16:eb:9a:
56:b4:6f:81:5a:3d:cc:0e:5d:6d:59:ff:3c:e6:d2:92:f0:db:
8f:7f:9d:f2:60:bb:fa:8f:af:00:99:bd:06:43:40:61:76:1a:
b2:9c:c9:87:d1:46:5e:b6:8e:38:4a:60:a3:26:22:20:92:61:
d7:7b:9e:e1:c0:bd:ac:b3:32:3d:1c:49:53:c8:2f:46:0e:bb:
52:6f:63:41:7b:40:ef:9e:56:c6:3d:ff:dc:3b:39:88:6f:8c:
f2:87:83:83:77:e0:ab:47:ac:5d:88:3e:a6:24:eb:47:be:1c:
ec:bd:95:17:75:2e:8b:3f:b3:ad:3b:40:87:b9:d7:4b:b7:ab:
af:5b:df:67:09:d3:af:57:17:82:ca:4f:3d:ab:9d:9b:99:e2:
7e:c9:1a:62:d3:3d:64:3f:c4:bd:a8:af:b1:66:82:b0:69:31:
95:2c:68:bf:d2:f8:70:e7:d0:49:30:3a:e1:51:91:0b:a3:10:
c2:2a:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:49:16 2026 by rpki-client