Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
File:                     4WPw_lTxea9MbAlwmP774tQ4Wxk.cer (raw, json)
Hash identifier:          4wZDuT6RwUqoyA+NyPEtGQuZLnwErvKsP6JzLqNICnc=
Subject key identifier:   E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02ABE6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 10 Apr 2026 14:55:00 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153681
                          IP: 163.223.60.0/23
                          IP: 2001:df5:3440::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175078 (0x2abe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 10 14:55:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:ec:b4:6b:ce:2d:38:6c:24:64:ff:db:35:
                    78:b8:99:d7:bb:0d:48:6e:88:47:b4:04:e6:e0:38:
                    ac:91:0b:92:70:49:9e:7c:04:12:23:40:8e:5f:22:
                    5b:27:4c:fb:f6:5d:5d:39:81:99:7a:f7:3c:a7:fe:
                    04:09:cd:c8:cf:77:ef:48:7a:b6:64:04:3c:b9:0b:
                    24:c8:f0:fe:37:b3:2c:ee:58:e3:01:2d:08:3e:de:
                    7a:e6:96:3a:ea:7a:93:ac:0d:6d:53:60:ef:8b:55:
                    a8:6e:ee:ae:9c:71:4a:87:b5:34:42:25:e0:75:57:
                    4e:ce:2d:4e:d0:0c:6c:28:e0:80:61:4b:1f:49:63:
                    96:ea:56:72:16:db:06:f1:cb:7e:e7:cb:94:d2:7b:
                    da:41:27:13:53:df:f7:64:91:fe:0a:14:c2:1f:7f:
                    a7:11:b4:37:53:1b:6d:16:24:aa:11:1f:b1:99:c9:
                    f0:d5:c7:35:de:4d:5c:bb:c2:b2:0e:fa:0c:d8:91:
                    4b:02:3d:ca:86:fb:88:9a:48:86:d1:52:51:61:dc:
                    0a:fa:e4:46:54:b2:97:bc:09:d8:bc:13:42:3d:3f:
                    f9:76:5f:fa:70:be:c8:e1:e8:15:06:a5:c8:ed:37:
                    97:54:1f:79:7c:8d:8a:ac:92:86:e8:0e:aa:c1:13:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153681

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.60.0/23
                IPv6:
                  2001:df5:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:72:ba:a9:ad:fb:02:0a:73:ca:07:9f:1e:8b:82:d3:42:
         1c:3b:34:51:1c:21:f0:d7:fb:c0:61:0b:8e:43:23:2d:96:97:
         2d:95:76:64:7b:bc:aa:4c:48:71:b7:45:b2:3c:4d:49:b3:ba:
         36:5b:fc:7c:61:78:d1:b4:f0:9c:6d:08:34:5f:e4:82:73:b9:
         ce:84:3c:4b:bd:06:f2:f5:16:33:c3:af:2a:d6:73:3b:76:c7:
         e8:6d:4d:e9:5b:ee:83:09:f9:0b:e8:a7:87:a3:bb:82:c6:66:
         64:3b:a4:13:f5:0a:cc:25:a4:e3:83:50:fc:4f:b3:42:37:4a:
         eb:0f:54:02:bd:67:e3:fa:6d:8f:f4:d4:f8:b8:1d:06:94:8e:
         8e:09:14:2f:fa:67:45:af:28:d7:4d:c4:5a:d6:e5:32:d0:0e:
         2b:39:c6:db:e1:a5:85:41:ee:75:e5:26:7d:c0:8a:a3:2c:d0:
         d1:53:0e:0f:1b:6c:70:66:7c:b6:9a:be:0b:7d:4b:02:42:5e:
         39:bb:11:cd:11:e5:ab:c5:62:f6:70:55:6d:af:62:3d:ef:d8:
         82:f4:69:75:3d:4b:21:7a:d8:ae:78:5b:24:0c:8e:fe:15:41:
         6f:76:57:9d:ab:64:73:5f:aa:88:bf:72:2b:93:05:74:7e:42:
         29:80:06:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:02 2026 by rpki-client