Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
File:                     9IjcYHyL28iy8lnlOSk-EQeDPa0.cer (raw, json)
Hash identifier:          KztMamt8fcdpWapviUN1rhk+1vKiRq2aQUYRp4Aq/bY=
Subject key identifier:   F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B439
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 May 2026 13:30:31 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 142262
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177209 (0x2b439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 12 13:30:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:85:82:a8:a5:c5:fc:b2:5c:02:e0:e8:1b:
                    43:a1:04:06:fc:f0:48:3b:1b:23:e2:a1:08:3b:94:
                    00:71:2d:04:07:fe:33:07:04:b7:74:23:62:e8:4f:
                    28:c8:d1:8c:3b:3f:4c:59:5a:fb:68:72:9f:62:0d:
                    6a:e3:9e:f9:5d:43:e3:1a:f0:4d:69:c1:ff:9f:57:
                    c5:fa:e0:b6:48:f0:5c:e7:1a:7e:38:76:e8:19:3c:
                    bb:04:75:f6:fb:ac:9c:35:3e:6a:76:f8:ac:8d:52:
                    e0:35:68:b2:4b:1f:41:52:6d:ef:b2:57:61:c7:cf:
                    c6:c8:0a:c3:a7:1f:38:d3:fd:cf:e8:4e:63:48:30:
                    73:ea:03:01:20:ff:d7:0e:1d:27:f9:a4:8b:5e:98:
                    60:3c:2d:9d:8b:a6:2b:50:1c:60:a9:74:f2:8a:73:
                    02:29:19:bd:49:3a:dc:8e:f3:77:19:71:66:89:98:
                    5d:a5:bc:47:fb:40:b7:03:5d:54:f8:31:9b:e1:f4:
                    38:05:35:fa:d2:6e:ed:21:6a:ae:5b:1e:b4:d6:02:
                    a7:48:d5:15:38:3e:e5:bf:39:5d:6d:e8:09:4b:75:
                    98:84:f0:6f:47:e3:36:62:6d:62:65:e4:e2:0b:ea:
                    7b:4d:27:73:71:0d:4b:5d:7a:80:34:47:ff:7e:bc:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142262

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:c3:b6:d0:08:68:47:27:f9:3e:c1:9b:fc:47:7e:56:36:
         6e:47:1a:4b:7f:33:3c:31:fe:4f:4b:8f:78:3b:f1:e5:6e:65:
         04:6a:e4:0c:48:c5:5c:32:da:57:f6:8e:e5:ec:01:5c:d7:fc:
         e7:3d:98:56:07:3c:92:27:a7:03:b2:d5:13:33:bf:c7:72:fd:
         4d:61:22:ce:00:71:1b:08:02:c5:4b:13:ac:5f:24:68:ea:65:
         3b:07:c2:df:99:07:0d:1e:d7:f1:46:91:a7:c5:12:83:07:cc:
         c5:49:4b:61:5d:7b:7c:f0:d4:92:f9:79:d2:60:4c:ff:12:7f:
         f5:8b:26:d6:01:ba:a0:8d:96:b0:f4:63:ae:f9:3b:d6:c7:e5:
         d3:85:75:6c:ba:94:be:1f:99:85:ee:de:41:b2:90:65:14:fa:
         b0:9c:47:82:2d:3c:d2:f7:27:23:83:7b:db:39:af:f5:0e:68:
         e3:97:ad:49:e8:cc:b5:41:3f:5b:1a:a1:40:63:27:33:ce:01:
         b8:34:0d:7a:b8:ed:46:af:02:94:17:a8:ee:a4:86:1e:c2:70:
         9f:d0:0c:b6:6e:94:20:1c:42:b0:5c:c5:7f:05:39:0d:a9:6f:
         47:55:67:05:97:e5:23:3a:78:5d:8b:3b:ab:9e:e7:d1:19:53:
         1b:ed:9f:48
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDArQ5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxMjEzMzAzMVoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRERCMTExMTAvBgNVBAUTKEY0ODhEQzYwN0M4QkRCQzhCMkYyNTlF
NTM5MjkzRTExMDc4MzNEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC43IWCqKXF/LJcAuDoG0OhBAb88Eg7GyPioQg7lABxLQQH/jMHBLd0I2LoTyjI
0Yw7P0xZWvtocp9iDWrjnvldQ+Ma8E1pwf+fV8X64LZI8FznGn44dugZPLsEdfb7
rJw1Pmp2+KyNUuA1aLJLH0FSbe+yV2HHz8bICsOnHzjT/c/oTmNIMHPqAwEg/9cO
HSf5pItemGA8LZ2LpitQHGCpdPKKcwIpGb1JOtyO83cZcWaJmF2lvEf7QLcDXVT4
MZvh9DgFNfrSbu0haq5bHrTWAqdI1RU4PuW/OV1t6AlLdZiE8G9H4zZibWJl5OIL
6ntNJ3NxDUtdeoA0R/9+vACNAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQU9IjcYHyL
28iy8lnlOSk+EQeDPa0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUREQjExL0JDNTU4QjIwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEREIxMS9CQzU1OEIyMDRFMDYxMUYxQTY0QjYyOUFDOTgzMzc3My85SWpjWUh5
TDI4aXk4bG5sT1NrLUVRZURQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiu2MA0GCSqGSIb3DQEBCwUAA4IBAQBsN8O20AhoRyf5PsGb/Ed+VjZu
RxpLfzM8Mf5PS494O/HlbmUEauQMSMVcMtpX9o7l7AFc1/znPZhWBzySJ6cDstUT
M7/Hcv1NYSLOAHEbCALFSxOsXyRo6mU7B8LfmQcNHtfxRpGnxRKDB8zFSUthXXt8
8NSS+XnSYEz/En/1iybWAbqgjZaw9GOu+TvWx+XThXVsupS+H5mF7t5BspBlFPqw
nEeCLTzS9ycjg3vbOa/1Dmjjl61J6My1QT9bGqFAYyczzgG4NA16uO1GrwKUF6ju
pIYewnCf0Ay2bpQgHEKwXMV/BTkNqW9HVWcFl+UjOnhdizurnufRGVMb7Z9I
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:19 2026 by rpki-client