Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
File:                     7G3y7NGPKF-XuI-EQf0pep7buUw.cer (raw, json)
Hash identifier:          XEQyJCeL9ZzDu8zMaQ7g+iO/PltkKjcSwOto1qXOZe8=
Subject key identifier:   EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B6B6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 May 2026 03:31:52 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 140035
                          IP: 2402:4b20::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 20:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177846 (0x2b6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 25 03:31:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A911725F, serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:1d:75:5f:d5:3c:89:6b:33:a2:4d:53:ba:
                    d9:4c:8b:75:16:11:b6:26:cf:c5:79:e9:7a:74:9c:
                    29:b1:b1:1c:d9:d3:1a:5c:31:51:11:76:eb:00:c9:
                    b8:9b:85:f1:db:c0:f1:d7:c0:d5:63:c3:4f:4c:42:
                    c2:41:fc:9c:9d:a6:97:67:3a:25:ec:94:1c:37:f8:
                    b2:18:e5:48:5d:70:39:ca:02:f1:50:7c:b3:41:48:
                    37:12:a1:de:6c:98:dd:9c:ec:e9:d0:ca:a1:9f:19:
                    09:01:98:36:b2:26:6f:54:f2:35:c2:25:50:53:a9:
                    4d:56:39:33:0b:3d:3b:1f:83:29:9d:e8:45:4f:ff:
                    35:9e:bb:4b:9a:22:e3:14:e1:5c:b5:58:0e:03:60:
                    9e:a0:5e:fd:77:88:a7:0b:1c:2e:18:00:b2:59:df:
                    4f:c7:6b:ef:b6:ad:50:d5:09:17:3f:70:53:b9:00:
                    84:aa:be:55:23:99:f8:4b:8f:c5:43:bc:bd:98:71:
                    98:b0:31:04:97:45:6c:82:fb:38:79:a2:a1:dc:4a:
                    c5:9f:8a:0a:d7:ed:42:95:5e:1f:11:74:81:e8:0f:
                    6a:38:41:4e:c0:da:96:45:93:43:16:7d:7f:69:dc:
                    d7:5d:88:22:0f:90:d2:c6:67:49:26:f2:99:41:13:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140035

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:7a:db:95:fd:19:b5:0f:15:49:f3:df:b9:76:7c:8c:9d:a5:
         e5:2d:c5:0f:d0:ff:fe:88:59:5e:27:3a:b8:27:d1:e5:b1:69:
         c8:89:ff:bd:77:ce:e4:8d:ba:75:3e:2b:fc:71:ce:92:a8:3c:
         ab:c9:19:9b:8c:28:94:89:91:72:96:22:50:66:24:fd:ae:27:
         20:72:7d:ec:fa:46:91:85:1e:11:ed:6d:ed:2d:78:70:5d:98:
         09:90:90:9f:6f:ad:c2:40:21:1f:ed:4d:1e:ca:bf:ca:7e:d7:
         54:84:ef:4c:57:7d:e4:56:51:a7:d4:5d:b3:0c:0f:30:d6:28:
         8f:e1:57:5d:0b:37:8f:7c:bf:f6:85:ba:33:b3:f6:60:9b:0e:
         bd:0a:c6:d9:74:94:a1:0e:89:9d:f2:4a:bf:17:9d:9f:fa:94:
         ca:cc:4e:1f:44:e1:5f:9f:e8:b6:b5:27:6f:a1:01:6c:64:a9:
         40:4b:2c:43:a2:62:89:7d:d7:ac:c9:3d:78:99:ff:00:a4:f0:
         5f:0b:d1:e4:e6:a8:37:bf:39:a6:8c:87:1b:23:a0:e4:55:72:
         d6:68:cb:d1:f9:da:1b:99:c0:34:a0:b5:89:1e:e7:a8:e2:89:
         e3:0c:76:e4:5e:04:84:d0:bb:f2:e5:64:a9:08:99:b8:26:64:
         d1:26:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:06 2026 by rpki-client