Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
File: MK6F0yU-osmer2NpYV9bwHDMX7I.cer (raw, json)
Hash identifier: FIxGrRjmlwZsMZ5dlUpVvFr7P1OfQ5SmCdMbAL32/30=
Subject key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 30 Sep 2026 03:05:58 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 139.189.0.0/16
IP: 139.200.0.0/13
IP: 140.75.0.0/16
IP: 140.224.0.0/16
IP: 140.237.0.0/16
IP: 140.240.0.0/16
IP: 140.243.0.0/16
IP: 140.246.0.0/16
IP: 140.249.0.0 -- 140.250.255.255
IP: 140.255.0.0/16
IP: 144.0.0.0/16
IP: 144.7.0.0/16
IP: 144.12.0.0/16
IP: 144.52.0.0/16
IP: 144.123.0.0/16
IP: 144.255.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33505 (0x82e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 30 03:05:58 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:8a:7e:aa:c6:62:59:6d:05:cf:bb:1e:0a:
2c:2a:2b:cc:9f:dc:b1:cc:f6:e3:48:b2:d2:61:49:
d1:95:24:3f:32:7d:36:00:b9:68:ad:2b:ea:e0:c9:
1b:6e:ee:c7:9c:dd:30:71:3a:92:97:4e:1a:d3:72:
27:70:b4:3d:76:1f:c4:4c:a6:1f:da:18:31:fb:ad:
c3:d1:d5:ad:13:49:34:14:37:0d:83:aa:f8:ad:dd:
5f:16:3d:4d:85:ee:c7:4f:5c:2d:2d:d3:b2:7e:f0:
18:1d:02:1c:fa:69:71:7f:d7:8a:15:00:b6:5c:6f:
88:c9:e6:6e:d5:14:ff:8d:6c:c2:72:3a:2c:cf:c7:
8b:5c:2e:d4:64:f5:02:6a:7f:bd:e7:fc:68:c2:af:
09:e6:3e:ed:41:47:dc:88:cc:a8:48:74:9f:82:dd:
27:22:17:86:43:40:bd:9e:b4:60:1f:78:9a:d6:31:
e5:c5:33:2d:e6:dd:b1:33:9a:19:12:ec:23:16:f8:
48:fc:98:eb:ab:6b:8d:e1:a7:15:af:de:d1:b6:08:
44:32:4c:b7:4f:b7:07:77:aa:8e:c5:f2:6f:d7:49:
f7:17:db:b1:11:b2:70:ed:5b:ff:52:d7:44:57:13:
b1:c4:4f:53:3e:d7:54:40:48:7f:07:42:2e:98:28:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.189.0.0/16
139.200.0.0/13
140.75.0.0/16
140.224.0.0/16
140.237.0.0/16
140.240.0.0/16
140.243.0.0/16
140.246.0.0/16
140.249.0.0-140.250.255.255
140.255.0.0/16
144.0.0.0/16
144.7.0.0/16
144.12.0.0/16
144.52.0.0/16
144.123.0.0/16
144.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:b3:43:2e:c8:a0:6e:e2:c8:7f:b0:a0:5a:9d:22:30:98:d9:
3b:31:67:38:23:15:84:71:6a:d1:97:f8:a9:b7:27:5d:9a:61:
df:38:f0:d7:d6:44:d3:59:f6:6c:92:04:a7:63:47:cd:0d:30:
59:68:b2:3e:5b:f3:04:a6:29:2c:6e:b9:b7:8e:ce:d9:3e:da:
b0:f2:11:53:39:95:24:be:0a:eb:0a:0b:af:2f:81:17:50:78:
02:e2:f7:b0:f2:01:d6:94:6a:cb:b0:7f:2d:37:7c:6a:85:be:
8f:15:4f:93:fd:20:63:a5:c6:04:4f:5e:23:40:eb:a8:a6:a4:
65:62:4c:36:93:3a:47:44:5a:54:36:97:2d:f2:1d:65:26:69:
94:84:43:bb:1b:66:a3:25:cb:46:25:0b:97:ec:3a:39:59:7f:
b6:0b:14:a8:8c:9c:cd:70:3d:b0:cb:db:ba:de:a1:48:23:2f:
4f:00:55:49:cd:23:cf:01:94:54:62:0c:d5:57:70:d8:91:cc:
3c:83:48:7e:fb:48:ad:71:78:c5:bc:6e:7f:98:4f:5a:01:ec:
33:2a:f2:e8:2d:84:4c:0f:87:f4:e5:3f:06:c4:fe:1d:c6:a6:
5f:fc:fc:b6:b4:52:01:7f:d0:77:e0:43:80:fd:40:6a:2b:32:
62:b5:82:00
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgIDAILhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkzMDAzMDU1OFoXDTI3MTIwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1M0VBMkM5OUVB
RjYzNjk2MTVGNUJDMDcwQ0M1RkIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6tSKfqrGYlltBc+7HgosKivMn9yxzPbjSLLSYUnRlSQ/Mn02ALlorSvq
4Mkbbu7HnN0wcTqSl04a03IncLQ9dh/ETKYf2hgx+63D0dWtE0k0FDcNg6r4rd1f
Fj1Nhe7HT1wtLdOyfvAYHQIc+mlxf9eKFQC2XG+IyeZu1RT/jWzCcjosz8eLXC7U
ZPUCan+95/xowq8J5j7tQUfciMyoSHSfgt0nIheGQ0C9nrRgH3ia1jHlxTMt5t2x
M5oZEuwjFvhI/Jjrq2uN4acVr97RtghEMky3T7cHd6qOxfJv10n3F9uxEbJw7Vv/
UtdEVxOxxE9TPtdUQEh/B0IumCgweQIDAQABo4IDHTCCAxkwHQYDVR0OBBYEFDCu
hdMlPqLJnq9jaWFfW8BwzF+yMB8GA1UdIwQYMBaAFHQBZagNEHGXCrwJwCtxwax8
HW4OMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy
MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9kQUZscUEwUWNaY0t2QW5BSzNIQnJI
d2RiZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJnNC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBAQYIKwYBBQUHAQsEgfQwgfEwQgYIKwYB
BQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw
MjkwNTk3NjgzNS8wLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtpLXJwcy5jbm5p
Yy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1RDMyNTNFQTJD
OTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5tZnQwOwYIKwYBBQUHMA2GL2h0dHBz
Oi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3RpZmljYXRpb24ueG1sMHAGCCsG
AQUFBwEHAQH/BGEwXzBdBAIAATBXAwMAi70DAwOLyAMDAIxLAwMAjOADAwCM7QMD
AIzwAwMAjPMDAwCM9jAKAwMAjPkDAwCM+gMDAIz/AwMAkAADAwCQBwMDAJAMAwMA
kDQDAwCQewMDAJD/MA0GCSqGSIb3DQEBCwUAA4IBAQB+s0MuyKBu4sh/sKBanSIw
mNk7MWc4IxWEcWrRl/iptyddmmHfOPDX1kTTWfZskgSnY0fNDTBZaLI+W/MEpiks
brm3js7ZPtqw8hFTOZUkvgrrCguvL4EXUHgC4vew8gHWlGrLsH8tN3xqhb6PFU+T
/SBjpcYET14jQOuopqRlYkw2kzpHRFpUNpct8h1lJmmUhEO7G2ajJctGJQuX7Do5
WX+2CxSojJzNcD2wy9u63qFIIy9PAFVJzSPPAZRUYgzVV3DYkcw8g0h++0itcXjF
vG5/mE9aAewzKvLoLYRMD4f05T8GxP4dxqZf/Py2tFIBf9B34EOA/UBqKzJitYIA
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:05:51 2026 by rpki-client