Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MPmdFTShIom3CPMPAlfFY8XQoQ.cer
File:                     7MPmdFTShIom3CPMPAlfFY8XQoQ.cer (raw, json)
Hash identifier:          TVTkkumS2iQMqBQfNMDbQtntZx/8Fa8iLS2/yTdekmM=
Subject key identifier:   EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B452
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 May 2026 23:31:52 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 154671
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177234 (0x2b452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 12 23:31:52 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9119461, serialNumber=ECC3E67454D2848A26DC23CC3C095F158F174284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:97:67:62:30:28:c4:20:60:e8:ac:50:b8:
                    38:f9:7a:7b:5d:b1:3c:99:47:39:89:82:14:a7:5c:
                    23:de:9f:c2:4d:b6:27:3e:67:d5:c9:00:9f:ed:cc:
                    a0:95:99:cb:17:c3:de:17:51:7b:47:c4:c2:7d:f0:
                    ec:17:21:c9:38:d9:fc:e6:f6:a7:df:c8:cd:a9:06:
                    d4:a9:45:58:80:2e:93:8f:72:be:55:e0:0b:89:64:
                    a4:a0:58:11:e6:6d:ef:e2:bc:ff:aa:bd:20:0a:0c:
                    67:8c:aa:c8:36:f7:5c:20:44:b9:38:1c:ac:52:e4:
                    bb:39:33:77:04:3e:6d:9e:6f:da:35:67:72:c0:e0:
                    53:71:2d:78:e4:e2:58:60:75:dd:36:19:93:d1:c6:
                    60:7f:be:01:96:3c:93:26:59:14:31:59:4b:65:e5:
                    8c:ad:ab:9f:2b:4e:78:a7:a3:e3:7d:df:8f:ef:a6:
                    1a:6f:d0:a0:21:b5:d9:15:be:01:24:50:4e:20:db:
                    b4:f2:d8:58:9c:b6:af:b3:f2:96:51:59:46:89:b8:
                    4f:0f:31:82:ba:ca:1e:b3:09:5e:bd:a1:87:e0:35:
                    56:64:a1:3f:98:9c:12:3f:7b:00:b5:61:d6:a0:8d:
                    55:d8:53:70:ff:66:b6:96:22:a3:d2:2d:7f:ab:69:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154671

    Signature Algorithm: sha256WithRSAEncryption
         23:93:0a:37:c6:d5:24:5d:ca:eb:81:0e:50:1d:30:39:f3:04:
         ec:4b:04:1e:27:42:1b:88:dd:90:94:b9:d6:cf:20:77:a3:33:
         f7:e9:69:ea:c7:21:67:92:c7:10:7e:c4:74:6a:e1:be:72:2e:
         45:5e:d3:da:75:2e:1e:a7:64:28:7e:be:42:f6:5f:b6:e7:a1:
         a5:ec:c0:97:02:89:63:49:64:44:2b:aa:7b:63:2c:15:19:85:
         f5:6b:da:4e:f6:2a:e8:ab:c7:8f:b6:8d:8a:ec:42:e6:09:66:
         0b:d2:e6:eb:d6:ef:a3:6e:ce:f2:af:47:3e:80:40:40:24:be:
         38:24:b2:81:e1:b6:ec:de:ae:f5:38:a8:10:a3:ee:06:fb:17:
         b5:bb:be:ae:eb:bc:2b:04:ed:ae:04:d8:85:68:fb:c1:c4:c1:
         77:ca:c3:73:46:cf:6b:96:4c:80:ee:b0:fc:73:ef:2d:fb:c3:
         b4:f5:82:4d:aa:3f:1d:cc:62:8e:f0:ce:de:9c:bf:45:04:f6:
         78:02:f6:4c:5a:79:dd:51:93:ed:b4:44:20:04:c1:cb:b8:4b:
         04:6a:33:0b:6d:5d:68:c8:23:a6:f8:e8:07:d5:dc:3e:59:bf:
         34:04:99:86:2f:5d:5f:fd:69:4a:83:26:e4:ea:e7:c6:58:6a:
         f1:7f:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:23 2026 by rpki-client