Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
File: TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer (raw, json)
Hash identifier: W1jV/MsB46lGOTBknvE84EIHWWbfEf6RQlOIVgamUMU=
Subject key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DB8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 29 Jun 2026 06:09:26 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.40.192.0/18
IP: 129.28.0.0/16
IP: 129.204.0.0/16
IP: 129.211.0.0/16
IP: 132.232.0.0/16
IP: 134.175.0.0/16
IP: 142.86.0.0/16
IP: 146.56.192.0/18
IP: 148.70.0.0/16
IP: 149.41.0.0/16
IP: 152.136.0.0/16
IP: 158.79.0.0/16
IP: 159.75.0.0/16
IP: 161.120.0.0/16
IP: 162.14.0.0/16
IP: 172.81.192.0/18
IP: 192.144.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32184 (0x7db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 29 06:09:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:f6:5a:4b:2f:a7:ff:1e:f7:b9:9d:cf:94:
25:75:79:60:31:55:cb:b9:1b:eb:c4:ce:30:8e:e8:
34:9c:23:a9:63:28:27:e8:6c:07:55:e7:82:a1:ca:
26:6c:1f:bd:a8:d4:44:76:05:c5:04:f2:cd:0f:ba:
88:94:fe:61:f9:3b:ad:ec:24:81:40:6f:8d:59:db:
79:07:84:65:9a:49:66:f7:b2:2a:c8:1a:b9:d3:f9:
6d:a1:81:92:93:93:8f:0c:e1:3b:b2:0c:29:65:f1:
06:86:b0:86:08:d7:a8:b6:7b:b2:b3:8c:29:ef:a0:
dc:90:c0:aa:c6:e9:3f:cc:73:02:5d:60:43:0e:b8:
a4:5f:c8:05:01:f6:6d:08:01:07:5f:31:64:61:76:
29:62:8f:f8:e5:dd:18:1e:f2:0e:12:d2:a7:79:0f:
6c:36:19:53:00:3a:83:5d:ff:a1:fa:22:aa:39:df:
b7:48:51:f3:5a:4c:1b:22:e3:3e:bc:8d:32:47:5e:
51:8d:db:93:ea:45:6a:90:34:2b:68:42:7c:ca:1b:
5e:6a:49:db:fe:f3:81:f6:0e:45:86:1a:db:7d:5a:
08:4c:f4:0e:44:4a:51:78:9b:dd:b0:36:3a:5a:e9:
db:3c:11:c4:6c:af:3d:84:ae:75:a4:1b:c8:37:a2:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.40.192.0/18
129.28.0.0/16
129.204.0.0/16
129.211.0.0/16
132.232.0.0/16
134.175.0.0/16
142.86.0.0/16
146.56.192.0/18
148.70.0.0/16
149.41.0.0/16
152.136.0.0/16
158.79.0.0/16
159.75.0.0/16
161.120.0.0/16
162.14.0.0/16
172.81.192.0/18
192.144.128.0/17
Signature Algorithm: sha256WithRSAEncryption
69:a0:8a:c1:8a:3b:8f:74:a1:88:9b:b0:ac:04:f6:48:78:d7:
c7:b8:95:7c:36:de:b1:ac:97:cd:85:51:7e:a0:35:83:b8:af:
68:9a:b3:d9:31:21:c8:24:1f:19:5f:8c:e2:f5:28:e3:43:20:
54:b3:3e:64:91:4f:8f:e9:1f:eb:a7:1b:a2:d4:10:39:80:d6:
81:56:69:78:14:71:6d:ec:94:af:b8:ec:d4:55:91:52:ac:62:
fa:08:02:5c:66:26:d9:0b:a5:2a:2a:69:75:95:c9:3d:fb:fe:
66:1a:3d:a3:28:6f:e1:79:65:70:c5:ae:92:eb:e7:55:94:d1:
d7:37:85:c9:98:ad:45:17:68:ef:8e:d0:28:8a:15:9c:39:3a:
1d:d3:fd:5b:e9:19:ed:85:e6:f4:0b:03:cf:93:62:33:c8:f9:
af:30:d2:73:93:52:7f:d1:53:ef:b3:0b:34:e3:75:9b:6b:1e:
a4:19:ac:a5:02:4f:f9:cb:d4:51:35:5d:40:c2:36:45:d7:6e:
a7:c1:3b:85:a8:05:1e:a7:61:60:ec:09:48:ef:14:bf:c4:db:
e0:33:7c:76:95:32:47:7d:43:45:52:40:32:50:ed:50:63:d9:
e8:cd:18:19:71:ba:8a:84:33:6f:b2:dc:ef:ce:7a:a4:9d:d0:
74:fa:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client