Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer
File:                     1u0VCduHw0xGCiZBoZt_SE5NxEU.cer (raw, json)
Hash identifier:          iRnvxeM8qIjAAQn50Rz7C3sc/Ot4lstW9g37bN0okXo=
Subject key identifier:   D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B2F9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 May 2026 01:40:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 55491
                          IP: 2404:ed40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176889 (0x2b2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  7 01:40:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:02:09:f7:f5:66:ab:9c:00:d2:3c:95:2d:
                    1c:3b:ad:e9:ce:73:d5:03:15:10:27:22:a0:02:8c:
                    78:c5:b9:32:83:15:16:da:1a:5d:6b:ca:38:ac:a9:
                    f4:29:4e:7e:c7:1c:bb:3d:b6:5d:2b:f7:e0:f1:52:
                    41:5b:45:89:4c:8d:45:aa:5a:e7:0b:51:5a:eb:d8:
                    ae:80:04:fe:d3:34:56:0d:7d:ca:fb:46:10:47:88:
                    08:d6:8c:f2:a1:97:9a:4b:ea:20:05:08:52:55:c6:
                    30:c7:fb:b2:3f:9d:29:5a:c7:2d:2e:69:11:e3:8f:
                    5f:53:29:1d:de:f0:c4:6e:3f:e2:76:b4:32:3c:ea:
                    85:2a:19:02:2c:f6:6f:7e:30:9f:f9:77:cf:b9:89:
                    fe:68:9f:ac:27:ac:12:02:bc:51:22:46:cb:cf:a9:
                    21:27:94:73:b4:c6:f1:b6:2d:20:a5:0d:56:67:b8:
                    08:9c:ee:19:37:46:b2:99:a0:d8:6c:4b:fe:0c:7d:
                    c7:72:c9:c2:aa:c9:b7:57:b6:0b:05:3a:88:9a:9d:
                    b5:1f:19:18:ad:5d:56:e2:e5:a3:d2:e2:d6:16:66:
                    99:5d:e5:10:cb:b1:0e:ff:93:a3:b3:0c:fe:9b:cd:
                    96:b8:f5:fa:a3:58:d1:be:8b:32:d6:a2:79:32:62:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55491

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:52:f4:01:39:e1:ee:43:4f:b3:9d:2a:f4:1d:34:91:72:
         00:ff:ad:2c:f6:23:76:38:e5:8c:b0:59:7c:01:1e:36:25:00:
         b6:1a:0b:6d:8c:a7:98:43:62:a5:7e:e0:cf:7c:5a:8c:11:2f:
         21:e1:db:b0:17:c5:c5:e1:bd:02:5f:71:0b:f5:44:27:8c:ef:
         dc:3f:27:34:51:87:2f:cc:f2:46:5c:ba:f9:cd:f0:ea:f0:50:
         0c:db:44:e5:ae:76:7d:27:27:61:66:91:94:bd:14:3c:40:67:
         bd:a1:f9:aa:35:d7:20:df:ad:cf:ec:5f:0a:2b:96:2b:db:34:
         d0:14:55:6d:f9:20:16:30:e3:a8:15:f1:16:13:16:1e:40:ac:
         55:50:4f:49:4d:4e:d9:67:c1:40:17:79:3c:19:db:87:71:14:
         69:4c:c4:aa:2a:78:ce:6c:2c:1e:af:e4:0b:b3:96:c6:30:b6:
         c9:35:f0:9d:0a:ac:f4:c4:1d:d8:c2:78:07:c7:c8:94:6c:74:
         f9:bb:8d:f5:72:51:27:3b:ca:4a:7a:1b:01:a7:f9:37:43:67:
         db:21:17:a2:7d:2b:29:3c:68:ff:9c:b1:75:af:38:10:64:b4:
         75:38:e5:42:e6:3f:9e:fe:ff:99:30:43:ae:23:f9:ae:50:02:
         12:a4:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:27 2026 by rpki-client