Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer
File:                     5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer (raw, json)
Hash identifier:          vSVLOeFNx3UqryqZY0LXWsU+BdIE1D8705Hsfrx4Or0=
Subject key identifier:   E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029716
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:32:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:df5:f2c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169750 (0x29716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:32:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A913631F, serialNumber=E46BCF9E70B4ECCFFC119E1D6DBF52896FB8D98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:55:ac:17:2e:1c:6f:d6:9a:5d:ba:6a:dd:
                    23:c4:ab:e0:64:85:9f:99:d3:c6:48:82:42:2a:a5:
                    b7:83:df:d0:c9:e3:53:42:d5:4d:4a:55:99:ab:49:
                    53:c8:c1:83:17:d9:aa:7a:8d:92:bb:6c:62:d7:5d:
                    fb:db:2b:f9:66:de:33:c2:c8:7f:da:f4:66:2a:8d:
                    cd:93:8b:14:d2:b3:24:58:00:49:ba:2c:61:23:83:
                    3d:5a:e8:5f:65:60:8a:14:82:2c:55:50:82:f9:a0:
                    30:49:d1:49:ea:5b:0f:6b:be:79:18:03:8e:94:50:
                    8a:49:72:68:62:11:1d:11:91:1d:35:02:44:72:f8:
                    c8:8c:3f:59:81:58:85:af:d4:66:c1:87:74:e3:d1:
                    32:2a:23:69:98:60:2b:69:53:3e:7c:98:b3:7d:cb:
                    8e:7b:e7:5a:4b:1d:cd:fb:15:b7:cc:49:7f:c8:25:
                    c3:56:f5:82:ab:a4:cd:bb:2d:8f:53:0e:9f:55:75:
                    47:9f:3a:58:f2:4a:3e:66:ac:ba:2f:97:9f:51:8f:
                    0e:74:60:e8:47:d2:db:a0:c3:e2:bb:c7:b7:e1:45:
                    4e:10:1e:44:ab:07:59:f3:c1:f4:55:c1:b5:8d:4f:
                    83:10:c6:41:e9:f1:c4:c2:4e:fe:55:8c:c0:5e:5f:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:c2:83:39:2c:f5:c6:ae:67:52:36:2d:7d:ad:c5:36:b9:
         14:d6:d5:c8:db:84:9a:6a:78:21:78:d2:2a:b5:2a:38:f3:41:
         19:36:43:47:c9:b7:32:2c:fc:4f:29:0b:e2:dc:0c:5a:d1:aa:
         d4:e2:0f:b6:f5:b6:42:19:b3:3b:55:c9:11:9c:2c:b7:5a:d4:
         2d:28:35:f6:ee:90:17:d4:40:66:c3:1c:7e:f6:93:8f:0c:ab:
         55:82:16:6c:d6:56:3a:43:58:f6:28:ad:97:78:23:f1:6f:b7:
         7a:5a:39:60:a9:b9:c8:5f:26:b5:65:63:da:05:3d:8f:4a:65:
         48:fd:92:c8:85:d5:71:6c:89:c1:c9:0d:c8:bc:76:c8:e8:60:
         ec:5b:5a:35:6c:78:1e:ce:dd:38:6a:ed:c0:dd:09:c4:9a:3e:
         57:96:a4:2a:e9:09:d2:a3:6a:5b:99:ec:77:64:71:95:8f:38:
         fb:40:c5:0b:4e:83:1c:6f:76:0f:7d:00:ed:37:18:a3:89:ff:
         1f:93:70:c8:e9:c3:ca:7d:59:c1:5f:9d:9c:22:24:6b:da:83:
         02:b3:83:f9:62:86:32:ba:6f:c0:c3:21:ab:7b:7f:d2:5c:9f:
         8d:e9:c5:7b:7b:28:97:b8:f1:58:e9:81:63:06:17:30:85:71:
         ba:2c:4b:1e
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIDApcWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMzI1OVoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzYzMUYxMTAvBgNVBAUTKEU0NkJDRjlFNzBCNEVDQ0ZGQzExOUUx
RDZEQkY1Mjg5NkZCOEQ5OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtslWsFy4cb9aaXbpq3SPEq+BkhZ+Z08ZIgkIqpbeD39DJ41NC1U1KVZmrSVPI
wYMX2ap6jZK7bGLXXfvbK/lm3jPCyH/a9GYqjc2TixTSsyRYAEm6LGEjgz1a6F9l
YIoUgixVUIL5oDBJ0UnqWw9rvnkYA46UUIpJcmhiER0RkR01AkRy+MiMP1mBWIWv
1GbBh3Tj0TIqI2mYYCtpUz58mLN9y45751pLHc37FbfMSX/IJcNW9YKrpM27LY9T
Dp9VdUefOljySj5mrLovl59Rjw50YOhH0tugw+K7x7fhRU4QHkSrB1nzwfRVwbWN
T4MQxkHp8cTCTv5VjMBeX2vlAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU5GvPnnC0
7M/8EZ4dbb9SiW+42YwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM2MzFGL0FGQzNFOTA0NzFFRjExRjA4NTRGOEYzN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNjMxRi9BRkMzRTkwNDcxRUYxMUYwODU0RjhGMzdDNEY5QUUwMi81R3ZQbm5D
MDdNXzhFWjRkYmI5U2lXLTQyWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAgAQ318sAwDQYJKoZIhvcNAQELBQADggEBAByHwoM5LPXGrmdS
Ni19rcU2uRTW1cjbhJpqeCF40iq1KjjzQRk2Q0fJtzIs/E8pC+LcDFrRqtTiD7b1
tkIZsztVyRGcLLda1C0oNfbukBfUQGbDHH72k48Mq1WCFmzWVjpDWPYorZd4I/Fv
t3paOWCpuchfJrVlY9oFPY9KZUj9ksiF1XFsicHJDci8dsjoYOxbWjVseB7O3Thq
7cDdCcSaPleWpCrpCdKjaluZ7HdkcZWPOPtAxQtOgxxvdg99AO03GKOJ/x+TcMjp
w8p9WcFfnZwiJGvagwKzg/lihjK6b8DDIat7f9Jcn43pxXt7KJe48VjpgWMGFzCF
cbosSx4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:37 2026 by rpki-client