Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
File:                     1BN478zNyo5lN-lfJ6o7NTdYCvM.cer (raw, json)
Hash identifier:          YP0/Xygios5D1f311jIta7xhZ8K8/EghMj8m0eAOlrg=
Subject key identifier:   D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BC92
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jun 2026 14:50:43 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2404:6800::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179346 (0x2bc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 10 14:50:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:fd:89:79:bc:97:6b:23:01:7a:cc:6f:b3:
                    d8:43:c3:ac:59:f2:91:54:e3:e1:89:68:c5:9b:36:
                    87:c9:03:8d:ed:76:ec:0c:6a:d1:35:fe:25:ad:17:
                    bb:e2:dd:f6:af:00:73:48:7c:d7:ba:f5:bf:4a:7d:
                    5b:23:ed:f6:16:ea:2d:ff:c6:16:52:6d:bd:57:aa:
                    d8:53:d5:dd:02:4a:c0:07:dd:f3:6d:82:d1:23:c8:
                    47:d8:ab:4c:58:11:4e:8f:ef:51:e5:00:24:7b:1f:
                    8d:f7:1b:dc:1e:61:32:bf:66:78:4f:d4:2f:df:ed:
                    c5:44:f1:8d:2d:b8:b5:ca:c6:58:bc:ce:47:e0:84:
                    60:f2:5c:25:67:54:8c:bf:38:86:ba:36:7e:d7:77:
                    09:ab:2a:9c:46:a0:6c:dd:8a:7b:2b:15:b1:cf:27:
                    7b:a9:a0:43:4f:84:02:73:6a:76:d8:19:c5:12:68:
                    bb:6a:d8:c7:b9:b4:ce:2d:da:af:55:aa:a4:19:a8:
                    90:21:52:15:a3:a3:ab:1e:9c:3e:00:0e:49:95:ab:
                    92:c6:a3:4f:b0:97:d8:c1:d1:0a:78:a0:80:3b:6e:
                    2d:d3:29:36:39:07:e8:27:2c:0a:93:39:8f:28:10:
                    71:05:a6:5b:01:4f:a3:4a:1f:23:c3:1f:12:0b:df:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:ea:8b:d0:b6:3c:d0:7b:a8:12:56:b4:74:88:b3:c4:8d:
         0d:af:7b:74:62:ed:91:50:79:af:4a:b4:4c:9b:bf:40:2e:6e:
         0e:a3:b5:1e:f1:22:c6:ee:72:9c:4d:47:87:23:d6:a5:ba:bd:
         6d:80:02:3b:5e:45:0a:e5:bf:e7:97:af:b5:15:41:36:67:b5:
         39:4b:14:eb:95:75:00:2a:a8:91:bd:86:d2:cb:5b:1a:e4:f8:
         f3:26:af:77:cc:1b:a6:66:58:4e:19:28:40:58:3e:6a:29:d4:
         06:23:31:08:2f:99:c0:d5:be:05:cd:10:10:eb:82:41:77:b8:
         64:89:4a:af:f9:04:97:1d:27:72:71:09:6b:2a:66:e2:e8:64:
         2b:dd:63:bc:ca:1c:76:33:35:1c:0e:bb:6b:37:0f:3b:15:d4:
         5a:a3:9e:71:d7:37:85:23:5c:65:8f:02:16:ae:7c:8e:1c:44:
         22:3a:a6:e8:8b:33:f8:b2:9d:da:30:26:2b:19:fd:1f:6b:5c:
         76:2f:74:f4:8a:6f:93:54:77:1c:94:dc:74:10:6c:8f:6c:95:
         98:7f:eb:f2:de:2a:33:9a:1d:d7:f9:8e:d2:bd:9a:4b:bc:82:
         cc:da:48:d3:37:9d:21:e3:27:15:89:72:9a:9d:c3:17:53:b8:
         3a:a9:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:09 2026 by rpki-client