Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
File:                     6f7YwwxxXQSs4XWunL1wDBl3BgI.cer (raw, json)
Hash identifier:          3oxcTt+d3HmsbCd01PTfCWVwRHG0caU4clQiwhrj6EY=
Subject key identifier:   E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B66A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 22 May 2026 14:14:47 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 137567
                          IP: 103.113.184.0/22
                          IP: 2402:c040::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177770 (0x2b66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 22 14:14:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:70:d5:4b:8b:21:73:40:30:85:87:36:bc:
                    0b:43:06:57:ca:e1:d5:c2:68:25:7a:5f:60:78:4a:
                    ab:cc:a3:d3:c2:52:7d:95:59:07:47:d0:c8:b9:fc:
                    c2:ee:54:12:c0:ef:f5:a6:c3:78:b0:e2:99:6c:0a:
                    bd:00:76:6d:cc:22:0b:6e:c5:53:88:be:56:a6:78:
                    dd:12:9d:cb:64:39:d8:4e:b8:e5:96:a5:f7:6b:2d:
                    5f:66:b8:8a:da:f3:3b:bc:4b:b5:a3:ea:a4:33:74:
                    3e:93:7f:e1:61:42:b2:c3:74:51:95:a1:58:fb:39:
                    af:b3:9d:d3:ef:f3:a8:f2:cd:08:8f:d4:d6:ff:92:
                    4f:b6:31:3d:bc:e2:8b:27:4f:04:8b:f7:2a:30:f8:
                    a6:21:3a:cf:11:92:f2:40:6a:eb:2e:12:22:e5:2b:
                    cf:24:05:ba:22:d3:bb:e6:97:f2:d7:5b:22:fe:aa:
                    cd:eb:ec:b3:19:84:80:2a:8f:b2:07:a6:ca:78:3c:
                    ef:8e:03:4f:f9:4b:c8:d0:97:ce:7d:54:7d:44:08:
                    70:27:aa:ea:26:4e:96:93:21:b8:1b:04:c5:c4:22:
                    ca:22:f7:05:57:98:ab:62:96:6f:0e:b9:65:ec:c5:
                    fd:c2:03:bf:26:a6:a3:f2:58:bb:dd:63:31:b4:15:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137567

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.184.0/22
                IPv6:
                  2402:c040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:13:8d:2a:80:97:f7:6b:00:d6:21:c2:1d:b8:e8:3d:8f:
         45:78:0f:76:da:3b:b8:3b:c6:12:b1:4a:fd:55:1b:17:16:ff:
         cf:a8:e1:e8:b8:6c:53:a1:bc:31:75:cc:1e:95:44:65:6e:15:
         ff:c6:9b:73:39:41:5e:0d:83:fa:ec:8b:d9:d2:96:a6:62:92:
         85:c5:d1:cc:e2:a0:7f:85:63:e9:69:97:11:6f:98:0d:3b:e5:
         c2:fe:b6:9d:6b:1a:ba:ce:40:ea:fe:c2:61:ef:27:ec:5b:0d:
         85:dd:b5:3a:e0:f8:4c:6e:5a:06:02:51:85:bc:ce:6c:75:5b:
         de:cb:6b:c1:cd:cb:94:30:45:b3:ae:27:fe:2b:69:b2:3f:c1:
         82:db:f3:52:0c:38:a7:04:b4:c5:11:27:8b:42:da:a2:ae:6f:
         1f:47:18:64:9d:34:ff:5c:4e:dc:4a:cf:d5:aa:ed:b5:c5:df:
         0a:1f:dc:02:c6:56:eb:29:8c:cb:55:04:40:03:70:31:bc:90:
         d9:26:6f:3e:2b:fc:1d:fc:a8:20:cf:75:b0:43:d7:a7:37:0e:
         fc:1e:e2:96:0f:f9:e8:5d:1f:cd:f8:c7:55:ab:8b:1e:54:d7:
         0c:31:40:a7:58:34:f0:41:f4:05:06:1a:9a:03:60:da:56:50:
         c7:00:4e:d4
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArZqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyMjE0MTQ0N1oXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVB
RTlDQkQ3MDBDMTk3NzA2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYnHDVS4shc0AwhYc2vAtDBlfK4dXCaCV6X2B4SqvMo9PCUn2VWQdH0Mi5/MLu
VBLA7/Wmw3iw4plsCr0Adm3MIgtuxVOIvlameN0SnctkOdhOuOWWpfdrLV9muIra
8zu8S7Wj6qQzdD6Tf+FhQrLDdFGVoVj7Oa+zndPv86jyzQiP1Nb/kk+2MT284osn
TwSL9yow+KYhOs8RkvJAausuEiLlK88kBboi07vml/LXWyL+qs3r7LMZhIAqj7IH
psp4PO+OA0/5S8jQl859VH1ECHAnquomTpaTIbgbBMXEIsoi9wVXmKtilm8OuWXs
xf3CA78mpqPyWLvdYzG0Fc3/AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6f7Ywwxx
XQSs4XWunL1wDBl3BgIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMzRUY2L0FDNERBQkM2NTkyODExRTg4RTVCNDQ2QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDM0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4
eFhRU3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhlfMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3G4MA0EAgAC
MAcDBQAkAsBAMA0GCSqGSIb3DQEBCwUAA4IBAQBaMBONKoCX92sA1iHCHbjoPY9F
eA922ju4O8YSsUr9VRsXFv/PqOHouGxTobwxdcwelURlbhX/xptzOUFeDYP67IvZ
0pamYpKFxdHM4qB/hWPpaZcRb5gNO+XC/radaxq6zkDq/sJh7yfsWw2F3bU64PhM
bloGAlGFvM5sdVvey2vBzcuUMEWzrif+K2myP8GC2/NSDDinBLTFESeLQtqirm8f
RxhknTT/XE7cSs/Vqu21xd8KH9wCxlbrKYzLVQRAA3AxvJDZJm8+K/wd/Kggz3Ww
Q9enNw78HuKWD/noXR/N+MdVq4seVNcMMUCnWDTwQfQFBhqaA2DaVlDHAE7U
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:13 2026 by rpki-client