Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rL6s47l0l-AvFsC1PRewCtPqEE.cer
File:                     2rL6s47l0l-AvFsC1PRewCtPqEE.cer (raw, json)
Hash identifier:          xoz2h78ZxeIxVWUSYMC43u8/9LDpLdYoj/fVL+KvqtE=
Subject key identifier:   DA:B2:FA:B3:8E:E5:D2:5F:80:BC:5B:02:D4:F4:5E:C0:2B:4F:A8:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BCD5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 12 Jun 2026 06:06:39 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 139081
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179413 (0x2bcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 12 06:06:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9148434, serialNumber=DAB2FAB38EE5D25F80BC5B02D4F45EC02B4FA841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:fd:ac:bd:18:6e:90:69:6a:36:d2:a8:06:
                    6d:90:09:ef:4f:62:9a:ec:90:56:bc:b1:05:bb:96:
                    69:0f:06:4c:0a:b1:03:3e:5a:4e:a8:61:8d:80:43:
                    5d:38:23:52:28:b9:dd:f5:4d:49:2e:d8:9e:a1:f0:
                    d0:5e:15:1e:3c:a8:a6:ad:ac:69:c3:b9:05:56:d1:
                    37:3c:9d:c5:83:b3:ab:b8:4c:b4:62:35:f7:8b:f1:
                    c1:fc:0d:bf:91:bb:72:b7:e9:63:fd:64:dd:8d:b8:
                    b2:aa:b7:fb:b1:5d:f0:79:ad:49:ae:9b:22:60:d0:
                    b2:f7:27:cd:5b:af:91:c3:a8:82:ab:71:3a:a2:51:
                    dd:f3:f2:e4:7c:2e:d5:22:8a:d2:0c:6f:49:7d:32:
                    5f:55:28:36:28:95:27:47:e2:c2:53:31:c7:09:83:
                    30:06:76:74:c3:16:cd:ca:74:d5:db:c9:94:55:53:
                    5e:6a:f6:41:55:07:d3:64:b7:a3:32:00:ea:05:c9:
                    4a:4d:ec:40:8b:db:0e:b5:29:88:67:9d:67:7e:26:
                    a7:58:c9:3a:45:0c:2c:ea:da:6f:b6:5d:33:9a:4f:
                    db:62:42:07:f1:cf:89:6e:5f:38:d3:17:5f:59:84:
                    03:cc:f7:55:26:63:22:d6:ef:0f:6e:b2:67:04:57:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:FA:B3:8E:E5:D2:5F:80:BC:5B:02:D4:F4:5E:C0:2B:4F:A8:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139081

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:83:5e:bd:7a:9e:15:05:70:26:32:91:23:39:1b:e8:0b:
         02:f9:96:16:6d:b4:07:b1:2f:c2:fc:0c:86:ac:e9:84:4e:ac:
         52:59:ff:a0:2a:31:fe:4a:51:0d:08:99:3b:d4:72:61:ca:b5:
         1a:3f:95:52:c9:e7:95:0b:16:8f:40:f0:57:a7:72:55:2b:47:
         1e:f3:b8:19:d8:b7:df:9a:51:23:66:6d:9c:f1:4f:9a:b4:c9:
         4c:38:9c:a1:27:4f:da:dc:c3:ed:21:f5:50:a7:70:bf:10:3d:
         0f:02:e8:41:c2:d0:9a:83:1e:d2:6b:d3:d3:2c:02:07:85:03:
         fc:8b:4c:55:6b:71:20:d2:54:9a:b0:80:dd:5c:69:6f:e5:f9:
         6e:15:8f:1e:f7:a2:4c:6f:d9:f5:48:13:14:ac:72:6b:08:12:
         19:9e:27:73:e4:75:ef:16:a7:74:cf:77:e6:50:a5:e0:a4:4f:
         fa:a0:8a:7f:85:41:4a:7d:35:c1:b7:d4:77:c1:00:d8:a8:7e:
         3c:d5:4a:29:7d:31:18:9c:94:00:ca:24:db:6d:0b:af:9c:0d:
         e7:fa:1d:9c:22:8f:12:15:34:58:1f:6e:bf:98:26:d4:f5:fd:
         bd:03:e4:68:2a:80:53:74:3a:66:13:34:d6:1a:95:08:bc:67:
         25:73:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:24 2026 by rpki-client