Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer
File:                     8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer (raw, json)
Hash identifier:          /cUTQPLCQB8WS3UEGNX02BjQyKTYI3auDCPN7okjIrM=
Subject key identifier:   F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B9D4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Jun 2026 13:57:28 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 142253
                          IP: 2402:6160::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178644 (0x2b9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 13:57:28 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:2a:34:84:a3:c6:a3:69:56:b1:c3:a5:e3:
                    1c:ab:fb:84:93:42:23:71:8c:8b:0b:91:44:85:ba:
                    1d:53:42:b7:36:32:86:db:cf:61:ed:99:12:b1:cd:
                    93:47:b3:3e:f7:4b:f0:a9:bf:72:10:24:40:61:23:
                    ec:63:13:24:17:98:65:ce:2c:3b:4b:66:87:89:b3:
                    d8:9b:99:f0:a5:79:28:33:93:55:cc:73:da:88:90:
                    58:8c:f3:26:2f:b9:95:19:b6:fd:75:7c:07:49:78:
                    74:57:9c:fb:d4:22:91:6e:4f:d4:60:36:81:17:ca:
                    d9:f7:10:67:d2:1f:81:86:c0:50:93:d4:44:6e:c1:
                    5c:cf:44:f7:78:b5:e9:2e:59:37:8c:25:75:62:67:
                    d9:0f:5e:32:86:27:56:57:e8:ff:62:f2:ae:04:18:
                    6f:37:aa:fd:44:b6:db:ef:c3:b1:9e:5f:2e:19:b0:
                    7d:26:61:ce:ce:cb:25:04:d4:03:f1:ef:4c:b4:0a:
                    1e:29:5e:90:cb:ab:fd:31:5e:01:12:1b:a7:3c:b6:
                    9d:38:bd:a9:97:06:ca:ab:8a:47:11:71:6a:4d:e1:
                    aa:7b:6b:f9:6a:f8:71:c1:06:c9:c2:c2:64:a2:2c:
                    8a:ec:f1:15:34:f7:29:50:1a:9a:60:e8:65:c2:39:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142253

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6160::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:58:6b:42:ca:ea:4b:92:c7:e6:75:49:f0:e6:9a:f9:e1:6f:
         3e:17:d4:78:4b:e3:76:4a:17:24:41:2d:f9:e5:81:7e:2a:92:
         1b:d7:c1:90:02:d0:69:18:53:f9:8d:f9:45:ee:49:06:78:8a:
         7b:d7:af:ab:f9:55:5e:e1:b3:30:af:6d:89:39:f9:6a:69:4f:
         b6:14:39:8f:86:3f:b9:aa:b3:21:1c:05:1f:85:0a:c5:e2:e8:
         39:c2:da:50:bf:a4:f3:51:36:c5:cc:0c:3a:74:3e:c7:24:21:
         ac:db:7e:2e:b0:53:f2:cb:56:3d:94:0b:b9:ba:6e:36:e2:ff:
         21:81:6e:1c:5d:ef:06:3c:81:9a:a5:6d:be:9f:2b:bb:6c:87:
         f3:c1:3b:99:4a:5a:8c:7a:97:b9:fe:f1:71:93:27:5a:e4:3f:
         a3:48:21:9a:cf:0a:e8:2a:c4:8a:7f:56:38:ad:eb:55:57:0f:
         35:73:ad:1f:af:13:a3:6d:ec:b3:31:fb:b7:e3:b2:c4:9e:55:
         65:8d:fd:c4:f1:89:1f:00:27:32:52:b8:d9:3f:92:82:03:9f:
         0d:cd:1e:1d:26:c0:f3:a5:02:b4:62:e3:41:29:46:5d:bf:e7:
         4d:da:63:7b:61:47:36:66:ce:f6:79:d4:8f:75:d2:f1:3f:e3:
         c1:68:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:16 2026 by rpki-client