Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
File:                     C5I347CGtYw82c5v1JrCYffVJaM.cer (raw, json)
Hash identifier:          RY9pAvGu6g45Sv9AiHbCT2QmXbZh3cluFetUkEucxM8=
Subject key identifier:   0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0291F1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:07:12 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 154463
                          IP: 163.61.88.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168433 (0x291f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:07:12 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:af:4d:18:a6:b6:91:e0:46:d5:17:d4:b0:
                    a1:18:76:0b:a4:6d:13:cf:a4:18:1e:2f:04:5c:3d:
                    eb:d5:b4:d0:65:e2:05:c0:90:33:9d:03:89:42:e0:
                    2b:c9:7a:03:b9:59:4a:6e:f4:fb:67:7c:5f:7e:b2:
                    12:cd:0e:7d:d9:96:8f:c4:fb:e6:12:d0:d9:64:a9:
                    a6:4a:13:0f:45:1b:99:e8:a3:68:90:51:50:d0:ca:
                    72:94:09:2e:ba:52:e9:2f:6f:18:ce:42:36:80:64:
                    03:6c:ca:f6:a4:2d:5c:b2:a4:96:c8:d8:fa:be:91:
                    bb:21:1c:00:91:75:b7:3e:17:de:03:9f:2e:bb:e5:
                    90:71:68:17:33:e1:bb:b4:99:1f:04:71:fc:d0:60:
                    16:32:da:ce:22:9a:06:d2:88:c2:e8:aa:f3:41:2b:
                    88:ca:aa:fb:10:28:50:4b:42:4b:6e:ec:d8:55:8d:
                    b1:98:14:0e:34:a4:79:a5:38:a6:cd:02:ac:19:b7:
                    1e:2f:0a:eb:3d:31:bf:ed:d1:2c:24:dd:dd:77:49:
                    5d:27:a3:6a:24:10:e0:2c:ec:b3:0b:75:41:de:69:
                    c7:74:e6:97:23:f8:54:d1:e7:de:e4:d9:96:d3:6b:
                    3e:0f:1b:69:ba:9d:15:ed:d0:64:1c:64:bd:ca:5a:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154463

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:79:57:25:94:09:42:fc:d1:6f:62:c8:2d:5a:1c:25:34:e1:
         af:98:f1:05:2e:b0:87:be:68:bd:f4:af:24:2c:aa:b0:50:1e:
         77:d1:c2:b3:1d:7d:19:ef:2c:1c:bc:4a:c2:67:72:b2:80:12:
         bd:fa:46:14:4c:e6:12:6d:a3:cc:cc:9f:56:96:d0:ad:1d:7c:
         ca:bd:83:91:50:61:2d:89:7d:53:26:1b:a1:54:55:49:a9:6c:
         ff:bb:25:40:1c:49:07:7b:fa:97:d0:4b:c8:98:5e:1a:ae:4e:
         e2:cc:99:40:26:6d:52:3c:5d:1e:7d:62:b7:6f:3b:ac:04:2f:
         95:22:4c:5f:2e:99:bf:13:0d:5b:78:4a:95:d5:0f:fe:4c:be:
         22:bb:f2:fa:a1:d3:42:92:09:d4:64:a4:cd:a6:3b:e0:17:2c:
         79:a0:6e:0d:63:0b:a6:a6:21:a4:bd:c6:32:15:2c:31:ee:01:
         42:db:30:53:d2:52:31:80:a9:51:67:0c:46:78:1d:12:99:a5:
         57:c6:df:28:c0:e8:34:53:62:89:15:97:21:97:b9:51:66:61:
         21:22:b5:9f:d3:fb:ca:bb:d5:47:89:02:26:89:86:72:3c:b4:
         c9:f8:c3:2c:58:48:62:82:9a:d0:1a:64:07:ad:ea:ce:1a:37:
         ff:2c:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:22 2026 by rpki-client