Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
File:                     2n7tifhToFCqePhmgZCMmcNRBnA.cer (raw, json)
Hash identifier:          IRPlKSXOsq22x/l9tueMpEXQOkE0yLrzFEM1pF73gMg=
Subject key identifier:   DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BBA3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 07 Jun 2026 02:24:45 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 4846
                          AS: 142228
                          IP: 2402:49e0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179107 (0x2bba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  7 02:24:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:27:3f:52:36:b7:af:7b:34:90:f0:40:2b:
                    ae:ab:45:14:bc:41:3e:3a:73:f3:24:83:7a:d5:21:
                    a0:71:ca:ea:0c:a1:df:01:4a:4f:89:3a:11:8a:d0:
                    a0:76:b2:5b:cb:59:ef:23:96:95:01:56:ab:bf:ee:
                    c9:5f:c8:9b:d2:ae:2e:93:8a:55:12:5a:3b:d8:d7:
                    6d:e5:17:82:eb:75:a3:45:d9:49:1c:ce:05:a1:3a:
                    05:af:d3:62:cd:ad:0e:1c:b5:c5:02:99:bd:49:b6:
                    d7:d8:70:2e:cf:40:1b:35:34:63:cf:a5:c5:3e:7a:
                    20:2c:4c:d8:67:f5:9e:d6:c4:f4:11:08:a9:e7:24:
                    da:de:56:19:f2:ee:80:41:a3:ed:e6:e4:3d:87:0a:
                    bb:b2:77:bd:23:33:27:2b:59:6f:a0:6c:a7:2a:74:
                    78:66:12:28:db:0b:6a:ce:04:c8:f3:f3:78:d1:ab:
                    6f:a5:df:27:8d:ff:77:56:81:5b:5f:b9:d8:51:ca:
                    c0:02:bf:12:39:e2:e2:d8:a7:65:de:ed:21:31:39:
                    18:f7:a4:3c:b6:13:a7:7c:c8:82:da:f2:d4:4c:fe:
                    cd:a8:2c:bb:26:f6:0e:d5:b0:97:7a:3d:af:fd:2d:
                    65:e5:5c:b4:55:ab:45:14:18:69:0f:4c:0f:8a:e2:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4846
                  142228

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:49e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:b1:64:0a:2e:76:ad:82:e9:b9:f1:4f:3f:3f:b4:3f:ae:
         b1:de:57:ad:76:23:53:68:85:b9:08:88:6f:51:fd:81:b6:c0:
         0c:fd:51:7e:c6:c7:5f:44:fa:e5:00:70:64:fc:f4:39:d2:9b:
         35:0c:40:99:55:83:aa:17:85:8f:69:f2:5e:55:27:c1:b4:61:
         36:d2:48:5d:81:db:7f:b5:55:2e:e3:3a:12:81:5b:06:2a:29:
         03:bc:21:7e:6c:e6:0b:3f:fa:9b:20:23:fe:cd:57:03:36:47:
         1c:c4:1a:c1:69:bf:69:b3:aa:24:a5:8c:e6:6b:d4:54:e3:92:
         33:6f:9f:dc:c3:23:cc:08:10:23:77:25:b4:31:e9:76:6c:d1:
         7e:fc:09:b3:48:bc:31:86:25:ab:ac:a0:a7:33:b7:a7:be:e7:
         1c:0d:0c:b0:28:2f:70:39:f5:e9:11:41:bf:24:25:c7:77:c3:
         dc:a4:b9:fa:e3:64:15:e0:fd:90:4c:1f:5d:ef:28:5a:86:33:
         d4:34:49:ac:7a:a9:f4:03:30:b3:4c:8b:54:62:a0:e7:a6:6c:
         47:fe:76:a4:8c:ba:96:e8:f1:e5:6d:cb:de:13:21:e4:e5:2f:
         98:76:d6:2f:00:d9:fe:df:5d:8c:27:a3:0f:eb:a6:5a:07:e7:
         69:79:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:15 2026 by rpki-client