Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
File:                     6EKSkSMrng-5SFoKrUk9fgfH5NE.cer (raw, json)
Hash identifier:          bDmjViXRstDgfTMs19WPLN/GDF4m6gTdFBq8ckNIV48=
Subject key identifier:   E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029577
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:24:38 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 153569
                          IP: 163.61.36.0/24
                          IP: 2001:df5:5c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169335 (0x29577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:24:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:5d:db:cb:fb:cd:0f:bf:e1:25:36:d1:bc:
                    5c:49:cf:99:c2:9d:2e:22:4e:7f:bb:dc:d6:27:79:
                    a1:2a:b7:96:3a:fa:2b:10:49:59:77:00:02:0c:81:
                    62:c9:4e:bd:47:34:63:1f:11:f2:cc:33:7f:93:56:
                    d0:85:a2:5c:f1:1d:df:22:3d:10:f0:02:bb:fd:72:
                    b5:80:de:e6:64:12:b0:32:bc:c2:e1:53:4e:73:b1:
                    55:e5:60:6b:81:40:84:c8:60:50:5b:be:41:71:a4:
                    9f:50:67:f4:69:c9:db:26:c5:6a:cb:63:b9:d1:96:
                    1c:37:e6:9b:f6:55:5f:2f:95:3c:ac:8e:18:2f:a3:
                    7f:04:65:23:56:e3:c4:bf:31:52:d2:7c:42:53:ee:
                    10:33:97:b2:9b:82:ac:53:bd:28:c7:ef:12:02:f4:
                    09:67:71:f8:87:0f:64:bd:df:a1:26:13:a4:73:37:
                    3f:81:07:23:aa:f1:8e:ce:9f:36:39:c4:5e:43:5c:
                    3f:a2:99:16:1a:65:8c:39:0c:e4:85:67:bb:52:86:
                    99:a3:29:83:24:d0:30:d5:e3:e8:ca:2f:5e:e9:66:
                    2b:d2:a1:e3:6b:cd:9b:34:50:f5:0c:6d:92:5b:e5:
                    12:a2:d5:52:b3:d8:70:9b:59:ec:f0:ba:91:1e:6a:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153569

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.36.0/24
                IPv6:
                  2001:df5:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:84:27:08:6a:d3:01:f0:70:c2:ae:b5:5e:38:44:3c:96:05:
         81:1d:0b:4f:9b:39:31:ad:d1:a1:07:6f:07:7d:b1:77:ad:cc:
         3b:30:8d:a5:34:6d:08:39:41:41:96:5a:45:fa:b0:fa:24:52:
         3f:bd:09:24:3a:8c:13:20:4f:f8:8d:e2:83:b0:69:b1:a4:2a:
         6b:0b:03:36:05:eb:15:11:8a:00:c1:26:e9:22:b1:d3:91:ac:
         f8:d0:08:cc:04:c0:d6:43:4b:48:fd:e4:ee:38:93:c2:6e:4d:
         4d:80:0a:43:0e:56:b2:e4:91:28:90:9d:d4:ee:9b:65:83:be:
         eb:ae:4c:22:28:75:03:ab:66:9d:b0:c3:7a:52:63:61:54:c6:
         30:8c:e0:36:02:3a:0c:c1:50:c0:c3:41:13:80:0f:46:8c:c1:
         bc:8b:92:67:25:9d:a4:28:f2:1b:85:59:55:f9:80:e5:dd:e5:
         b7:f5:ed:27:4f:dc:83:6c:a1:d3:4a:13:30:14:ab:a9:37:b0:
         29:d4:db:f7:7f:a7:fa:ec:ed:60:60:ce:38:69:a9:3b:11:bd:
         bf:6e:a3:92:90:40:5f:84:d2:bf:93:66:0d:fd:82:fe:f2:90:
         8f:e9:eb:7b:01:72:8c:b9:4e:41:d2:45:2c:46:06:92:ca:69:
         82:f5:62:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:54:03 2026 by rpki-client