Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
File:                     61jsRBV7-r2bmCUAY65H3MrqvuE.cer (raw, json)
Hash identifier:          9fMloTYGlRvZWXpEAM9EJRBdK/1KIK937YFMGNz1tJc=
Subject key identifier:   EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D3CC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 03 Sep 2026 23:41:30 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 139673
                          IP: 2001:df7:7240::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185292 (0x2d3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  3 23:41:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91F6697, serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:1a:4d:88:a3:4d:1b:ad:11:eb:5c:28:26:
                    6e:d7:3c:9b:54:5d:b7:62:be:ad:e0:05:e0:22:10:
                    40:31:d3:23:3b:c7:f5:1a:e4:13:5e:bb:a6:d2:b5:
                    39:4e:18:fd:94:87:5a:0c:61:98:f6:40:6f:f6:e5:
                    cf:cd:a9:58:a1:e8:c9:b6:9f:2b:8a:fc:47:80:2d:
                    74:d8:b6:c6:9c:f3:58:da:51:53:62:0e:db:91:d2:
                    82:92:17:63:61:4c:99:ce:b2:de:64:b3:9d:29:bc:
                    52:cd:d4:3b:a1:6e:87:96:83:4f:56:34:66:8c:9c:
                    d3:d7:0a:4b:d5:47:80:4e:e7:d7:cd:1d:c9:31:67:
                    3e:38:d7:b4:54:a5:8b:db:1f:05:71:e6:45:7f:30:
                    49:03:4e:97:18:54:ef:ff:ef:4c:4a:0a:9e:17:95:
                    22:df:3d:ac:a9:01:cc:b2:de:13:01:5c:d6:93:b1:
                    f3:cd:31:61:39:09:65:24:7b:14:bd:e0:57:ad:38:
                    d9:7b:6e:42:e9:ef:c0:53:c2:fd:02:38:c4:c9:de:
                    93:f8:7d:75:17:89:f3:2a:8a:3d:2c:f4:35:71:87:
                    6c:49:0b:0d:d3:03:b5:a1:44:cc:20:c1:5b:ab:36:
                    5f:08:51:df:37:1e:5c:c9:b4:cd:83:15:00:ad:78:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139673

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:7240::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:0c:4a:f9:a0:ba:54:27:6d:c8:a0:fc:71:12:b8:43:58:82:
         c7:39:0e:73:42:72:d4:f9:f2:fd:87:e7:45:74:34:ff:af:57:
         c7:79:e7:6a:3d:6e:4f:55:fc:02:dc:8e:ab:a5:76:37:41:e3:
         05:69:37:f5:b5:44:d3:ac:b8:3a:9f:65:92:24:c1:e4:44:8d:
         16:10:c8:02:b5:69:1e:05:36:30:a1:31:34:2c:0f:3e:e9:90:
         09:75:f9:14:87:47:a2:2d:fb:95:2d:1e:a2:c8:6e:6b:15:6f:
         1f:9c:5e:d0:b7:d4:43:ac:cd:af:63:96:9d:b7:c1:f2:bb:2e:
         d0:7b:96:e0:b5:5b:ac:a7:bc:23:20:2d:42:09:9f:06:44:3b:
         be:08:3e:9f:35:72:6f:bd:61:46:99:90:95:f4:53:51:bd:7e:
         ce:a5:55:71:f4:d2:10:9b:ea:a7:8c:c5:44:d8:bc:bc:29:c4:
         05:12:29:1a:21:21:60:b7:ec:3f:47:12:36:b0:3d:2b:8c:ef:
         75:09:4f:23:08:eb:c6:c9:7c:2b:e0:f9:64:63:f4:92:27:78:
         df:21:8a:9d:50:b3:4c:c3:58:fd:23:ab:2a:28:cf:d7:ed:d1:
         1d:49:b1:21:e9:e5:dd:45:9b:03:ce:58:e8:17:64:5f:bd:3b:
         d9:cb:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:23 2026 by rpki-client