Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7du7Mx3QOeu-Q795bsLLjeGAxj0.cer
File:                     7du7Mx3QOeu-Q795bsLLjeGAxj0.cer (raw, json)
Hash identifier:          5GijXqJbnDa2s+rO8bRTg+b9xezvjJKPaoe6/EzKHp0=
Subject key identifier:   ED:DB:BB:33:1D:D0:39:EB:BE:43:BF:79:6E:C2:CB:8D:E1:80:C6:3D
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       5568
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E1853/32134644B19A11F1ADD43DF56E11F970/7du7Mx3QOeu-Q795bsLLjeGAxj0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E1853/32134644B19A11F1ADD43DF56E11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 16 Sep 2026 06:45:28 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 6662
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21864 (0x5568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Sep 16 06:45:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91E1853, serialNumber=EDDBBB331DD039EBBE43BF796EC2CB8DE180C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:af:cc:45:a6:92:78:d1:61:d5:83:dd:5c:
                    49:0e:e5:67:20:ae:66:69:3e:ef:88:af:bd:a0:c8:
                    e8:11:96:7e:42:1e:3d:66:22:4a:ea:1c:2e:db:b9:
                    d1:a9:f0:16:57:66:4c:55:99:bc:9a:df:05:75:8d:
                    44:58:2b:c4:95:18:09:93:5e:a2:0c:90:df:c5:c6:
                    de:67:3e:25:98:ef:f7:71:94:65:b7:4c:1c:1e:0b:
                    2f:43:91:e6:c3:94:b9:6e:16:41:6f:d7:31:a4:86:
                    87:ad:e3:12:06:67:7e:74:ce:31:05:71:27:a2:39:
                    64:48:7c:c0:d8:24:34:78:06:6a:b2:90:c5:ee:d9:
                    bf:75:81:94:ad:7a:32:7f:b7:57:0d:03:48:1b:40:
                    38:5a:82:7b:97:26:b8:11:a6:fa:19:9b:74:f9:ba:
                    ac:89:36:ff:d8:a8:4d:80:1a:0b:1c:3e:06:4a:b8:
                    3d:fe:ea:4f:f7:fc:8e:31:b8:c3:a8:3a:4c:3e:78:
                    ef:c1:26:7e:c4:47:99:04:dd:10:6b:cf:b2:cc:22:
                    31:14:2f:d6:2b:ab:3b:10:1f:48:39:2c:44:67:e5:
                    f1:24:df:48:cf:26:54:bd:ed:1f:ca:76:ef:c8:af:
                    69:55:ab:da:0f:59:ad:49:98:d4:29:55:13:ab:0d:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:BB:33:1D:D0:39:EB:BE:43:BF:79:6E:C2:CB:8D:E1:80:C6:3D
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1853/32134644B19A11F1ADD43DF56E11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1853/32134644B19A11F1ADD43DF56E11F970/7du7Mx3QOeu-Q795bsLLjeGAxj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6662

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:58:f0:cc:b3:d9:d1:a5:dc:9b:ab:d0:62:eb:7e:ce:58:
         85:7b:94:29:4c:1b:51:90:82:c9:e5:6e:38:06:bd:e4:ed:97:
         4c:1a:0c:59:87:d2:fe:9a:de:cd:6c:bf:a0:8c:97:93:6d:03:
         e2:0c:74:5e:ce:4f:57:3b:c8:7f:6e:19:6e:b4:1c:0c:01:70:
         fe:fd:45:fb:ce:70:47:e9:13:9f:d8:c7:36:ed:db:e4:1a:d2:
         fc:59:b8:80:9d:30:a4:98:7d:a9:24:dd:8d:16:af:fc:bb:5e:
         11:b4:8f:ff:13:9f:20:b3:a0:50:56:7f:dc:a8:92:0f:52:ed:
         5c:25:27:e7:e7:43:86:14:8e:62:48:b9:e7:17:06:58:2a:bf:
         ff:f3:01:5d:d6:10:59:58:28:3d:32:89:87:c8:ed:29:25:10:
         2d:cd:4f:4b:00:17:44:bb:60:a8:40:f5:ba:53:e7:0a:63:03:
         f1:70:df:48:48:99:05:8b:ec:65:02:5c:0c:c6:41:68:00:18:
         7a:a9:70:18:1d:6d:24:8a:8b:f4:c3:dc:2b:72:5a:ae:9e:c1:
         89:3b:4e:db:22:5e:38:94:52:97:9a:b8:07:3b:e3:fa:3c:f5:
         a7:f6:93:4b:f2:b6:61:80:4b:34:05:b5:5e:54:c2:f0:fc:2e:
         43:dd:2b:54
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgICVWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwOTE2MDY0NTI4WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMTg1MzExMC8GA1UEBRMoRUREQkJCMzMxREQwMzlFQkJFNDNCRjc5
NkVDMkNCOERFMTgwQzYzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJUYr8xFppJ40WHVg91cSQ7lZyCuZmk+74ivvaDI6BGWfkIePWYiSuocLtu50anw
FldmTFWZvJrfBXWNRFgrxJUYCZNeogyQ38XG3mc+JZjv93GUZbdMHB4LL0OR5sOU
uW4WQW/XMaSGh63jEgZnfnTOMQVxJ6I5ZEh8wNgkNHgGarKQxe7Zv3WBlK16Mn+3
Vw0DSBtAOFqCe5cmuBGm+hmbdPm6rIk2/9ioTYAaCxw+Bkq4Pf7qT/f8jjG4w6g6
TD5478EmfsRHmQTdEGvPsswiMRQv1iurOxAfSDksRGfl8STfSM8mVL3tH8p278iv
aVWr2g9ZrUmY1ClVE6sNwo8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTt27szHdA5
675Dv3luwsuN4YDGPTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE4NTMvMzIxMzQ2NDRCMTlBMTFGMUFERDQzREY1NkUxMUY5NzAvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxODUzLzMyMTM0NjQ0QjE5QTExRjFBREQ0M0RGNTZFMTFGOTcwLzdkdTdNeDNR
T2V1LVE3OTVic0xMamVHQXhqMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAZBggrBgEFBQcBCAEB/wQKMAig
BjAEAgIaBjANBgkqhkiG9w0BAQsFAAOCAQEAqAZY8Myz2dGl3Jur0GLrfs5YhXuU
KUwbUZCCyeVuOAa95O2XTBoMWYfS/prezWy/oIyXk20D4gx0Xs5PVzvIf24ZbrQc
DAFw/v1F+85wR+kTn9jHNu3b5BrS/Fm4gJ0wpJh9qSTdjRav/LteEbSP/xOfILOg
UFZ/3KiSD1LtXCUn5+dDhhSOYki55xcGWCq///MBXdYQWVgoPTKJh8jtKSUQLc1P
SwAXRLtgqED1ulPnCmMD8XDfSEiZBYvsZQJcDMZBaAAYeqlwGB1tJIqL9MPcK3Ja
rp7BiTtO2yJeOJRSl5q4Bzvj+jz1p/aTS/K2YYBLNAW1XlTC8PwuQ90rVA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:01 2026 by rpki-client