Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
File:                     96B_epkcIaJc05qyCt5Po7XgXRU.cer (raw, json)
Hash identifier:          kgfP6/5/9pb/aNy7ddlXjp4yl0tTOYEk5VSjy7BYFhw=
Subject key identifier:   F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B958
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 Jun 2026 14:26:14 +0000
Certificate not after:    Thu 01 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 140321
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178520 (0x2b958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 14:26:14 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:fa:23:c0:75:3c:6e:9a:c4:f5:fa:fa:11:
                    2d:28:c3:4d:9d:a2:a9:ab:f7:e9:94:b4:06:07:0f:
                    a4:28:e9:ca:3f:61:be:df:e6:81:c2:f7:9c:2d:a4:
                    1a:f5:39:ed:5c:99:55:a5:c0:d7:81:38:ae:b6:d5:
                    c3:2b:06:08:89:4b:57:ef:f4:a1:e8:a4:fe:09:55:
                    cd:a7:62:20:9f:fd:bd:32:68:d3:a4:bd:b8:0f:b1:
                    89:6c:90:f6:76:ac:49:e8:c0:fb:c8:df:4e:94:93:
                    99:fb:ef:21:09:3b:d1:cf:db:6e:7c:ac:58:22:bb:
                    d4:70:6d:21:e6:e6:ec:30:69:88:e9:a3:70:40:e3:
                    4d:4c:6b:ed:10:aa:a8:7d:9e:6a:b8:05:cf:ee:02:
                    02:f3:f1:32:50:f0:ae:16:47:52:f7:3e:39:57:0d:
                    43:d3:a3:47:99:4e:44:38:b9:f9:87:ab:08:34:e1:
                    15:92:92:b0:7f:b0:6a:8c:bb:34:99:d3:15:af:7b:
                    f3:d1:26:d5:7b:d4:c8:ba:50:28:2f:bf:ad:0d:46:
                    36:5a:79:f2:16:d8:10:99:bc:34:86:3a:c2:83:48:
                    cb:b8:86:42:d8:63:4b:47:b1:96:58:1d:57:74:c2:
                    5a:13:f9:aa:e4:79:2a:91:d5:6d:7f:56:a7:60:d4:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140321

    Signature Algorithm: sha256WithRSAEncryption
         0d:6d:a5:78:be:ef:e0:57:ea:cf:94:aa:69:97:f8:51:3f:05:
         c9:1e:65:3c:fd:b1:cd:fe:3b:91:64:54:94:28:76:b3:e2:61:
         90:61:c8:af:78:bf:1f:69:95:44:27:21:f3:31:fe:88:f8:48:
         3f:56:83:a0:5b:59:73:77:32:0a:7e:8d:c1:0a:b8:7b:d8:d8:
         4f:d8:7d:dd:11:e1:e7:17:e5:8f:7b:52:c2:a6:49:21:4e:4b:
         a4:cf:82:75:cd:17:51:e4:4a:3d:a3:c1:d4:d9:66:0c:3f:79:
         01:96:76:b2:a9:27:75:67:ad:0d:51:c6:52:18:49:1b:09:cf:
         0d:ef:54:0f:28:95:fb:94:23:d3:b5:a4:4d:d7:4c:4b:9b:72:
         7f:b6:29:c5:db:2e:0e:12:ee:32:41:ec:e6:f4:8b:92:48:bc:
         16:a9:56:de:c2:f4:1d:46:04:67:c2:bb:15:3f:ee:bd:7e:04:
         81:92:78:20:3d:e9:aa:4b:40:ea:10:ee:29:50:ab:c3:cf:8b:
         48:68:f3:43:b9:0c:ba:9d:ef:23:86:76:6f:70:89:c2:41:2f:
         19:a6:e3:16:6c:21:b6:4e:b1:f9:0e:b1:88:b6:97:d5:fa:36:
         c9:df:2d:eb:de:20:4f:4d:1b:ab:f7:d8:18:4e:3d:3c:c7:d0:
         e4:15:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:38 2026 by rpki-client