Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
File: dXiOFTUaYkoqUo09RRwCenL2p6Y.cer (raw, json)
Hash identifier: pN2VoXCcaEw+r3dsMqucK88NrcnsOtQFtnqUwUTGT/4=
Subject key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C4D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Jul 2026 02:34:20 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 203.191.144.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181463 (0x2c4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 02:34:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:c9:48:93:5a:ec:57:5e:b4:1c:52:30:52:
77:06:ae:d5:e7:0f:2b:81:40:7a:37:09:ef:5f:7c:
ab:77:1d:ba:6e:53:28:f0:a4:f4:46:81:84:06:71:
7c:96:fc:a8:3e:69:10:92:e3:36:93:72:ce:7d:c9:
d9:10:27:58:1f:f2:c5:ec:fa:fc:c3:d2:e5:d2:44:
76:bd:1c:c5:91:17:cc:9f:b4:b7:5a:5a:fa:09:4f:
d7:98:9b:1e:c9:13:61:7a:4a:13:ca:8a:d0:2f:ee:
8a:de:da:8c:e6:ae:42:a5:4c:dd:db:76:d0:af:4e:
37:21:6a:3e:a9:e5:2a:0c:0a:d8:27:d1:58:70:7e:
b8:9f:11:c6:fc:a5:89:51:a5:e4:9e:1a:8c:d4:fd:
13:15:73:cc:e0:9c:90:31:8d:1d:ae:e2:0f:0e:60:
3c:4e:2c:92:ec:4a:d3:1e:97:4d:65:49:1f:3c:65:
39:da:c6:55:a6:4b:6d:f2:9f:f4:cc:74:d5:7a:12:
dc:03:19:e7:0f:d4:a3:81:64:82:7e:ef:43:64:e9:
54:cc:2a:df:98:ad:ed:58:57:2e:75:e6:8a:65:39:
74:72:38:fd:0b:5e:db:59:74:46:0f:cd:f4:e0:de:
61:93:11:38:c5:ad:cf:cd:36:21:1e:df:7e:a5:ff:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.191.144.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:7a:7b:cc:40:0e:0c:2a:ee:4c:a6:33:cd:a1:41:46:93:22:
a5:41:96:07:d8:19:cb:26:f3:8f:9b:ca:06:22:db:a0:54:36:
bf:c9:2b:df:70:49:f6:f9:a3:8d:38:5c:5c:c0:91:75:a5:c7:
9d:f5:5f:25:1a:c0:0a:87:57:67:d8:ae:6d:ab:3b:34:a3:c6:
68:a3:b1:16:46:f8:bc:c5:db:d8:e8:a0:32:9f:61:6b:e6:cb:
39:06:45:1c:25:ef:61:e6:ef:ad:9b:1c:42:c2:52:ae:a5:7f:
f7:79:70:d4:bd:02:1d:f1:ca:7f:84:ea:0c:17:03:ff:4d:9f:
08:a7:75:d2:e3:db:2a:28:37:3d:f5:ac:40:b6:7a:e8:e6:23:
da:df:15:a3:26:f9:a0:cb:59:d1:71:5d:3e:c7:b1:5b:70:81:
4a:a8:8a:d6:e9:89:97:12:dc:f9:19:f6:b6:1d:6e:0f:f1:67:
c0:b8:67:f7:12:7e:8a:02:af:18:4a:61:ed:76:c6:e2:b9:70:
94:9d:4f:4f:89:78:86:ee:23:5b:3d:8f:84:ec:1e:44:cb:53:
55:ee:45:88:50:8c:96:ff:0e:ca:2f:a0:33:cf:23:d5:24:87:
1b:7b:66:a0:85:92:a6:8d:be:4e:77:6e:2a:70:86:66:02:6e:
62:b4:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:40 2026 by rpki-client