Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer
File:                     4WfcTVfF__boFwUeksBgF1urHR0.cer (raw, json)
Hash identifier:          JuIhz/jrCOd3bc7KoNhQiMyv1nNeEJX2uyMHDEaYihc=
Subject key identifier:   E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       025764
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 23 Jul 2025 03:49:49 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 154076
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153444 (0x25764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 23 03:49:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:c0:e2:6a:f3:77:bb:5d:13:f8:0e:5c:60:
                    c4:8f:b6:62:4f:1e:5f:f8:96:82:fa:1e:2c:40:30:
                    0c:e2:a1:70:4d:23:49:6d:58:6b:34:16:36:30:d9:
                    56:3e:2a:fc:df:48:85:8a:ac:15:e0:32:62:fd:59:
                    fc:8a:48:d2:c9:33:00:30:9f:28:39:05:c9:4a:a2:
                    60:c9:0d:1a:53:46:1c:f6:31:76:f7:29:df:af:37:
                    cf:3b:b6:4a:da:96:28:38:6a:de:be:3e:a5:b2:cd:
                    a3:aa:fa:7e:8d:02:f2:d9:1f:43:55:77:f3:c7:aa:
                    4d:15:df:89:1a:ee:6f:39:ee:1d:46:0a:4a:c5:5d:
                    1a:7f:b9:00:f3:53:77:01:de:10:37:a1:db:ec:9c:
                    78:16:d4:ba:b4:b0:46:2b:5d:ca:ee:df:3d:f8:71:
                    18:0d:b4:ef:9b:d2:c0:9f:fb:86:59:1f:85:46:a3:
                    d5:34:54:72:9d:d5:87:b8:40:57:ae:9d:d3:2c:91:
                    4e:3c:81:34:f9:55:b7:7c:db:0b:60:30:0c:7a:72:
                    bf:b0:b8:d1:ae:b2:42:6e:2a:72:aa:64:56:59:c5:
                    ac:91:5d:f0:96:da:c5:67:0e:bf:23:62:0e:03:b7:
                    3c:dc:7e:63:c9:6e:c8:6c:92:2e:22:6c:83:c7:a2:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154076

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:51:0c:8c:62:2a:70:a4:8f:fd:f7:ad:0f:6e:f0:d8:d9:
         57:ca:78:c9:05:78:47:02:7c:80:4c:6f:ed:91:e9:fb:36:bc:
         9e:62:24:48:8e:57:6e:b8:7f:06:a7:a3:ec:0b:f2:b2:ff:3f:
         8c:66:61:cd:e2:c4:5a:a8:44:94:67:e6:a8:6a:4f:a2:43:1e:
         14:e3:e1:5e:57:74:74:ec:ad:e4:48:11:d6:fa:b9:50:8e:7f:
         9a:89:5e:fa:a8:77:43:48:ff:2b:59:05:ce:e5:4b:b0:f5:e8:
         eb:c1:c3:30:59:e3:d1:21:2a:12:76:11:5e:31:8f:80:ab:92:
         07:a2:fe:2f:36:d9:98:a1:81:bf:12:5f:97:ad:11:49:9b:be:
         e2:7a:48:20:c6:88:af:11:69:16:a9:d3:44:26:a3:e1:5b:67:
         6f:7a:5f:a7:c4:b9:2c:14:8c:0e:64:0f:1f:1e:e8:0e:05:e1:
         90:f3:d8:89:42:35:b1:95:c4:a5:a5:97:4d:65:99:6f:f7:11:
         97:03:c0:7c:f9:45:23:e1:0c:f0:72:54:7e:e0:47:2b:84:18:
         22:1a:01:a5:be:d9:c6:4f:38:18:f6:a1:0e:4d:e1:f7:5d:40:
         74:07:77:de:bd:0c:04:4a:ac:43:3b:a1:48:1f:96:c1:ed:76:
         0b:97:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:21 2025 by rpki-client