Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
File: aEXTMcQXKW06kxgd2QEFkbH3DVA.cer (raw, json)
Hash identifier: IhukAZGgbUTKBL25YobnoAjh7wBm/ds+roKC2jAYdbs=
Subject key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C025
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 29 Jun 2026 06:09:38 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 133478
IP: 43.136.0.0 -- 43.145.255.255
IP: 43.148.0.0/14
IP: 43.176.0.0/12
IP: 101.33.128.0 -- 101.35.255.255
IP: 101.42.0.0/15
IP: 103.95.224.0/22
IP: 114.117.128.0/17
IP: 118.24.0.0/15
IP: 118.195.128.0/17
IP: 150.158.0.0/16
IP: 150.248.0.0/16
IP: 2404:80c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180261 (0x2c025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 29 06:09:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:1d:e6:14:e1:b0:90:34:94:05:f5:a0:98:
4f:82:11:be:6a:d4:15:c3:b5:d1:54:1c:cd:a0:b5:
62:3a:b9:58:fe:db:e5:8d:bd:33:fe:78:bc:0c:31:
3d:01:5a:22:ab:f9:e3:8c:af:4c:11:3a:a1:01:b1:
4c:b3:99:5b:e8:b2:fe:75:a7:a7:9f:1a:b6:3c:f3:
6e:43:49:e4:66:e0:c5:38:26:9f:0f:7c:8c:c5:4f:
38:81:34:c3:4d:fd:74:9f:37:a7:77:25:86:59:e7:
84:a9:f1:97:28:e0:d1:7e:4f:84:d2:7e:3e:93:ad:
b5:5e:60:65:10:19:63:b8:97:8b:fd:26:87:6d:af:
7a:93:03:a4:33:55:96:8d:70:85:7a:a8:39:64:d8:
5b:d0:3b:35:9e:77:37:86:65:a6:f1:5d:eb:b9:d0:
89:e9:40:4e:bd:f8:9c:e4:06:00:0d:68:6f:9d:29:
3d:00:c9:a2:2d:b6:f5:b9:23:5f:ab:ed:e7:4a:17:
81:3a:a4:01:fb:43:c9:c1:1b:59:d2:4e:e2:a0:5e:
30:87:d2:97:ba:04:bb:f0:d2:b7:b8:5f:94:c9:7f:
e4:7a:e4:9a:4a:25:8c:ba:d2:70:d6:51:a0:4e:6c:
c7:5b:09:8a:e7:fc:99:bc:da:fa:cc:c2:4a:eb:e0:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133478
sbgp-ipAddrBlock: critical
IPv4:
43.136.0.0-43.145.255.255
43.148.0.0/14
43.176.0.0/12
101.33.128.0-101.35.255.255
101.42.0.0/15
103.95.224.0/22
114.117.128.0/17
118.24.0.0/15
118.195.128.0/17
150.158.0.0/16
150.248.0.0/16
IPv6:
2404:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:cc:7d:35:99:54:47:ed:bf:fc:76:0c:78:32:11:7d:14:7b:
e9:d1:67:52:0a:63:04:79:76:58:da:db:5b:b6:df:7b:23:90:
42:22:3a:c7:5d:26:31:16:73:1f:29:b2:03:84:b0:71:3d:02:
fa:f7:2a:ed:3f:23:7c:aa:50:27:ef:d9:00:59:7f:e4:36:e7:
ac:db:8a:54:d4:4f:f3:46:59:29:ba:6b:9d:23:ef:9e:05:36:
e1:50:4c:b6:bf:44:ba:cc:fb:aa:62:ec:cd:ff:cb:5c:a4:43:
a8:18:14:e5:76:2e:d4:e0:46:44:95:98:2f:e8:25:86:c5:a9:
3a:75:da:b3:c8:a0:33:e4:43:99:40:70:d1:ce:a4:65:03:f2:
07:5b:d4:f7:c2:8f:f6:df:c6:2f:7d:11:5a:ef:46:a0:06:7d:
39:14:19:32:39:e0:39:b9:11:24:61:dd:2e:05:b4:f9:7d:fd:
c8:96:49:09:a0:7e:36:c0:68:cc:40:82:69:32:17:41:9e:2e:
62:34:f7:66:ac:e6:6a:3a:96:e3:fe:34:8f:5d:00:cd:14:4a:
df:71:77:89:72:69:b5:2a:77:60:9d:23:78:4e:a9:2f:2d:c4:
fe:db:5b:ee:c2:a7:f2:75:c4:6f:5d:42:45:d6:b6:5f:62:43:
68:55:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:01 2026 by rpki-client