Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
File:                     9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer (raw, json)
Hash identifier:          Z2Ndb4n7FpYt2jWb4SroR9lN/eFmSBytQM+KOlQnpVo=
Subject key identifier:   F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AC0B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 12 Apr 2026 11:10:46 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 154517
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175115 (0x2ac0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 12 11:10:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91B3F7E, serialNumber=F55B6C27998A05C5F71B3DCA908C7108BCCF0B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:40:53:67:19:bc:1e:93:d0:2b:5b:4a:3f:
                    56:67:11:c9:24:dc:82:29:53:50:f8:cb:77:77:a8:
                    d5:93:6b:1e:0d:84:9f:6c:28:ab:29:5e:ed:d3:97:
                    db:fc:c4:5d:14:e5:0e:7f:ff:ce:65:23:3a:d6:62:
                    77:0c:7b:cd:0c:97:fd:7d:24:9f:d4:1f:2e:01:85:
                    b9:4f:95:81:9e:d2:5d:77:33:98:c0:a6:40:ef:9c:
                    4d:f8:aa:a0:3d:bf:1e:31:62:88:0f:15:1e:ce:47:
                    9a:04:97:e5:e9:bd:91:1b:6c:f9:a9:91:20:d1:0a:
                    ff:99:ef:cb:d5:fc:54:21:4d:d4:15:f8:12:11:83:
                    8c:89:f4:16:a9:74:cd:b2:9f:cf:45:11:46:13:5d:
                    75:9e:b6:c9:a7:dd:97:c0:e7:77:67:d5:37:55:ed:
                    cd:48:0b:e5:89:86:61:1a:c6:43:43:cb:47:9f:e7:
                    61:35:2d:33:85:7c:9b:be:b6:e1:0e:82:16:30:a3:
                    c0:b9:96:d6:9a:d1:04:e7:cd:ff:9b:e5:b1:3a:ad:
                    6c:a8:2a:97:79:b5:69:69:6d:fe:eb:63:82:81:2f:
                    ec:f5:bf:83:2c:ed:7a:58:9e:d8:e0:3e:35:5e:04:
                    fc:9d:74:b3:45:0b:b6:b3:a4:79:83:4b:01:7f:8d:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154517

    Signature Algorithm: sha256WithRSAEncryption
         d1:10:52:4d:d1:c1:07:a7:34:41:b8:2f:ec:06:5a:40:90:a7:
         5a:61:86:ef:36:f8:6d:09:04:70:d3:55:8b:fb:63:bb:b0:d0:
         b7:b1:db:4d:ab:f1:ae:cf:80:19:91:1c:3b:29:95:e6:b3:6f:
         72:ea:aa:9c:42:e0:f2:12:38:57:53:40:13:65:4a:20:30:61:
         f2:9f:96:9d:5a:33:79:47:a8:6e:e7:35:22:21:1c:4d:36:38:
         99:f1:a0:4b:36:e0:3a:d1:b3:bf:14:31:94:dd:bb:88:58:44:
         77:23:e3:bc:a4:a2:41:47:5f:2d:b4:86:12:b4:00:61:c6:a9:
         f6:9c:33:b4:7c:4c:8f:2f:da:ae:fa:74:04:38:3c:95:2d:f1:
         bf:a8:aa:73:90:31:69:aa:13:a2:d5:13:4f:e7:ac:55:27:5b:
         d9:a2:cb:2e:b7:77:90:cf:d8:1c:5b:19:12:82:4b:e6:ce:58:
         a1:ea:0a:96:99:11:d2:d0:fc:af:b9:05:9e:98:c7:03:4b:00:
         aa:c2:3c:d6:d6:b9:ca:08:3e:ca:5f:a7:4c:df:e1:5a:6e:bd:
         80:cd:51:37:8a:b8:44:47:0e:49:f1:21:6a:a9:c0:18:22:02:
         56:a1:19:5a:8f:b9:33:e7:19:81:66:ac:e5:2c:a0:b4:1e:35:
         13:40:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:29 2026 by rpki-client