Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.cer (raw, json)
Hash identifier:          zdDMraxENPDatvcqCvdhQ5BIUD9FOimSLVBcWI9lPp4=
Subject key identifier:   E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029B60
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:52:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 9216
                          AS: 56179
                          IP: 122.144.32.0/19
                          IP: 202.154.192.0/19
                          IP: 203.135.64.0/19
                          IP: 2402:4900::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170848 (0x29b60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:52:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:76:3b:23:38:72:92:6f:7a:ac:34:48:3c:d7:
                    91:cd:6c:82:71:62:a7:cd:9b:5c:8e:25:a9:9e:66:
                    2a:51:dc:e7:b9:81:6d:3c:24:20:b9:4e:32:1e:fa:
                    01:80:ee:e0:3b:3d:3d:81:57:5d:d4:f9:64:90:5f:
                    2c:85:55:f2:99:2b:ac:09:2c:76:19:a9:ed:9c:40:
                    2c:cf:51:45:7a:b7:64:83:64:1e:0f:ce:bb:f3:5d:
                    ca:fc:4f:b8:27:56:27:9e:93:cc:fe:d0:40:1d:4a:
                    95:ae:26:ec:97:dd:e9:3c:ce:92:9d:2b:ef:4e:6f:
                    99:e8:5c:f2:90:53:65:e6:60:12:41:21:3d:3b:6f:
                    6f:0c:36:59:1e:11:a6:0b:cc:d3:b5:36:b6:e8:39:
                    86:52:4a:8f:6f:31:57:b9:17:fb:48:4c:b4:2a:f8:
                    12:63:ce:93:c0:c1:94:f9:74:7e:5c:2d:a3:0f:d8:
                    50:be:c3:1f:ea:5f:48:d8:51:98:8c:79:0b:3a:b6:
                    00:5c:17:dd:f6:30:11:7d:00:3b:39:a1:77:b2:3e:
                    f2:05:b9:93:40:a6:b1:f0:60:10:01:86:38:8d:86:
                    aa:83:86:4e:2e:21:5a:a7:4a:83:54:5e:aa:74:43:
                    28:b3:bc:eb:da:9a:eb:35:11:1b:9d:71:d2:98:57:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9216
                  56179

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.32.0/19
                  202.154.192.0/19
                  203.135.64.0/19
                IPv6:
                  2402:4900::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:15:8b:46:c6:5d:e5:a4:09:32:8d:e0:28:21:43:61:f9:41:
         1c:64:2f:f6:e5:b1:51:d0:35:41:3d:43:4a:b3:12:84:85:27:
         63:31:b8:8f:a1:a0:de:68:c9:b0:c3:21:0c:b5:15:16:ba:ca:
         c6:79:5d:31:89:66:74:17:82:3f:90:79:05:0f:8b:45:7e:01:
         39:3e:e3:3f:3e:25:c1:f7:88:bf:af:24:f9:12:00:d5:7b:ef:
         02:6a:03:dd:be:8a:99:67:88:6e:c8:1f:d6:10:05:b0:5b:3b:
         ec:b8:78:23:81:fa:da:8e:d3:a2:5f:b8:85:ee:5b:eb:00:af:
         5f:27:e4:f6:b1:bb:1e:24:15:49:58:6e:f1:d8:46:5e:17:76:
         4e:4e:60:f2:73:15:99:2e:db:c4:20:16:cb:23:8a:38:29:fc:
         84:30:75:30:f3:08:d8:c4:4c:05:58:3c:86:bc:74:df:df:66:
         6e:b4:58:8e:9b:cb:14:14:22:10:da:32:e5:f5:4b:d7:f7:64:
         3e:02:a9:90:87:26:ba:5c:2f:33:4f:2d:fc:5c:f2:7e:4b:41:
         b3:78:50:ed:d6:29:e0:57:b0:53:36:73:a9:2d:0c:7c:ff:81:
         33:9a:1b:fe:3a:24:eb:3a:ae:00:b1:35:57:4c:5f:77:09:93:
         20:6c:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:15 2026 by rpki-client