Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.cer (raw, json)
Hash identifier:          HLIxgG8MjqW1U4ucnS44kMZo248UXuLqmC12/j2za7c=
Subject key identifier:   04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AC2E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 13 Apr 2026 04:13:40 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 152604
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175150 (0x2ac2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 13 04:13:40 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:a6:2a:4d:15:a9:e6:ff:1b:b1:2d:ec:00:
                    56:2f:a4:04:2e:50:06:80:44:3e:6d:f4:c0:d9:26:
                    85:a8:a8:5d:eb:20:12:b5:80:f3:b2:2b:90:ee:ee:
                    09:5d:e2:6b:54:b6:5c:1c:d0:8d:2c:c9:b0:51:73:
                    36:16:22:cc:cf:f8:38:e1:40:2c:3b:4c:ef:8b:1c:
                    cc:19:29:53:00:0d:fb:8a:46:84:11:b0:02:8f:a9:
                    f3:c4:32:4b:fc:97:3b:44:1f:e5:e5:a3:4a:99:fc:
                    a9:05:5d:7c:2a:ed:c8:8c:3c:03:ef:bd:69:c7:76:
                    21:b8:03:fd:e9:17:3c:ab:5c:46:b9:2d:91:0c:a1:
                    49:03:b7:57:0c:92:93:39:d7:8d:1a:cb:b8:27:74:
                    55:d2:7a:99:92:25:d2:d7:d9:b4:d3:8f:70:70:63:
                    b8:04:fc:db:8a:6b:9d:78:41:bc:ec:fc:16:08:ff:
                    91:8a:ef:f2:44:75:f0:9f:99:db:1d:cf:f5:0e:33:
                    f6:ae:98:4e:49:46:b1:70:9d:d4:59:ca:6f:6c:aa:
                    75:73:f8:1b:fe:d9:a9:a3:1e:26:25:a0:c9:ff:57:
                    f3:da:61:3a:59:84:96:cc:53:d2:ec:56:44:19:80:
                    1b:12:07:da:45:d8:69:3d:01:08:a7:e6:1d:8e:c5:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152604

    Signature Algorithm: sha256WithRSAEncryption
         93:04:55:fa:49:fa:da:91:ef:9c:fe:ea:fa:af:4d:bd:5d:df:
         ce:58:88:ca:0f:b2:1e:fd:53:5f:87:ff:70:7f:6e:8c:0a:c0:
         4d:dd:e9:fb:8f:9f:9e:28:c4:51:e5:96:3a:16:c0:cb:7c:8b:
         8b:70:3c:38:dc:67:2b:0f:0c:fc:00:b9:1a:ec:83:f7:e0:e1:
         23:e9:b6:a7:77:4d:54:40:48:12:a7:58:f1:fa:ac:e3:3e:f2:
         c4:04:24:49:f5:43:0d:a8:29:e6:90:f0:e7:5e:40:65:8e:18:
         a2:6b:3c:15:8e:90:58:db:dc:8e:85:57:bb:54:b0:d6:9b:16:
         80:6a:f1:ad:9b:69:7e:3a:b9:ca:75:e1:da:9c:fa:b5:55:9f:
         88:63:d6:f9:f8:d1:ca:06:d9:d6:a8:15:99:84:46:0d:bc:ad:
         a4:ac:6a:f2:13:95:13:f9:a7:54:22:80:12:eb:18:50:37:97:
         79:be:02:f0:11:11:2a:9b:6f:08:d8:9a:37:04:e6:a5:f6:eb:
         c3:68:8f:e8:22:a2:1c:3d:c1:c3:02:b6:90:50:f1:6e:e8:b8:
         71:64:56:e6:4d:2d:74:cc:d1:4b:2a:36:23:49:2b:fe:d9:f7:
         a2:47:1a:5a:f1:36:59:67:83:65:e0:ba:22:d3:d2:f0:df:aa:
         c7:46:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:35 2026 by rpki-client