Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
File: h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer (raw, json)
Hash identifier: BPRFcAhsuoxvbHzxn1T9wxKCt8gnwRW1jPICsMdYkNg=
Subject key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 51E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 27 Feb 2026 05:29:14 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 57.176.0.0/15
IP: 151.158.78.0 -- 151.158.81.255
IP: 151.158.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20961 (0x51e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 05:29:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:f0:52:f1:cb:fe:fc:5c:68:d4:5d:59:52:
ab:0b:e1:d0:b2:f3:19:a3:f9:5e:73:e0:50:9c:05:
ba:81:32:79:83:55:2d:f0:34:3e:7a:84:52:c3:25:
be:75:dd:eb:69:3d:31:ef:6c:56:04:16:9c:a1:d7:
0d:6b:27:97:89:4c:90:55:1d:50:ec:55:7d:26:c8:
72:58:5b:53:4a:84:1f:fc:6c:d2:11:00:e3:04:a1:
af:49:0f:fe:31:0c:60:02:4d:ec:33:1e:69:5b:fb:
2c:80:a2:53:8e:1f:28:35:fb:84:5f:d5:22:1c:fc:
9d:94:9e:b8:25:46:c4:d0:7e:bc:ef:e0:81:d9:51:
5c:66:23:2b:5c:a6:d7:2c:74:f7:0b:4f:a2:b1:60:
81:80:2c:2e:57:2b:bd:a3:f6:6d:a7:71:27:88:dc:
54:6c:b7:04:bc:e8:3f:a2:be:73:e1:e1:1c:e5:af:
1e:be:d5:a8:f0:20:0c:3f:b9:93:37:3b:4b:19:d7:
8d:fb:b9:7e:20:bf:24:78:94:ed:36:4d:ac:ef:f6:
45:e3:88:f9:e3:6f:ef:87:f1:cb:44:34:f8:c6:55:
27:74:bb:b1:a3:a8:d5:00:cc:d6:d3:fe:7d:8d:7e:
0a:71:69:62:84:4d:d0:cd:25:3d:1b:ed:c1:90:02:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
57.176.0.0/15
151.158.78.0-151.158.81.255
151.158.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:43:75:79:94:e2:20:01:21:b7:62:4b:51:7c:4d:e4:06:29:
a6:13:97:31:a4:14:75:c1:ee:a2:8e:d2:4b:83:41:94:24:b4:
0b:25:fb:16:38:ba:04:87:2f:60:93:d7:bf:c5:6c:69:e0:bc:
56:fa:c5:37:c5:b0:ee:92:fe:35:58:3f:10:67:17:46:fe:68:
1b:a9:90:f0:69:e1:fa:a0:6a:59:d2:c4:18:de:ce:04:0c:28:
f9:fc:3b:62:e8:10:84:1c:d9:59:ed:92:8f:37:74:07:62:13:
bd:29:f5:f0:47:16:64:0a:c7:86:df:9b:d8:4a:d8:90:18:5f:
1b:09:ae:d5:ed:11:05:60:51:13:d2:51:de:5e:e8:97:61:1e:
62:b5:94:cf:21:01:62:61:4f:47:62:40:f0:bb:e5:ad:c4:63:
a5:49:0d:a3:47:a2:f3:4a:99:f9:aa:87:e7:26:be:4a:ed:70:
2d:74:75:57:c1:3a:e4:da:f8:8e:21:a3:34:dd:17:e3:2e:db:
bf:da:54:62:88:26:bb:1c:46:7f:29:da:d0:d2:06:65:a0:53:
3a:8d:a1:a7:2e:6e:fd:ff:b1:ad:46:b3:a4:25:70:c5:4b:9d:
7a:0c:8b:71:71:ea:08:12:c9:3d:91:7a:0b:63:5b:35:04:85:
7c:70:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:27 2026 by rpki-client