Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
File:                     C6dUacYtJZIFuou2XbmdAze6130.cer (raw, json)
Hash identifier:          mGRzoTrAOkrYXH2+gOa44lUqhrxWGD6umHd+QMwKZzE=
Subject key identifier:   0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02DD7F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Oct 2026 12:58:02 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    IP: 103.21.28.0/22
                          IP: 2405:5500::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 10:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187775 (0x2dd7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 12 12:58:02 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A915C532, serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:50:14:4c:c6:64:81:eb:1c:b0:43:48:a1:
                    69:ed:ae:d1:8a:74:56:e3:71:09:24:a8:57:7c:e4:
                    0a:f8:58:66:46:e0:57:c6:cc:e0:fd:41:8b:d3:d4:
                    64:15:28:7a:dc:36:02:59:87:49:8d:31:e5:d4:6a:
                    c1:e6:9d:cf:fe:f0:b4:61:64:60:16:5e:06:02:87:
                    b8:93:db:72:1b:19:8a:ce:c4:de:03:65:7f:91:d8:
                    23:ed:7a:43:ed:fe:f8:c2:db:2a:5a:cc:67:45:2c:
                    30:e7:98:a4:14:c7:b6:72:9e:1a:00:bd:57:19:10:
                    85:bf:2c:cb:6b:d7:c5:29:54:34:72:b5:f3:be:c1:
                    61:9f:4d:c5:5f:0a:f6:2c:b5:e1:2e:da:c9:07:52:
                    97:b5:d2:fb:a6:9c:86:29:42:f3:65:8d:18:26:0a:
                    ff:32:be:b0:69:76:67:24:7f:80:2a:9c:a4:7a:c5:
                    b7:ce:1c:fa:a5:b8:c7:88:2e:21:9e:09:61:34:bc:
                    41:6a:b7:a3:27:b2:a8:86:f0:66:c6:e6:6f:fc:87:
                    13:9c:80:db:36:e0:66:7d:8a:1e:4d:a7:68:e5:dd:
                    72:4d:a7:5a:54:2b:33:16:54:c3:76:74:ff:b0:c3:
                    88:d3:71:e1:36:27:bf:df:f4:04:1d:40:67:77:d6:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.28.0/22
                IPv6:
                  2405:5500::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:ff:8e:72:72:c6:5b:64:70:5f:83:0f:39:d0:9d:d4:30:a4:
         2d:51:b5:c2:e6:e2:53:a1:8e:c3:1e:08:c3:f8:9d:dc:5d:0c:
         8a:58:e9:e0:18:d9:72:01:ec:9f:70:92:12:9e:20:78:d6:d9:
         95:8e:e3:f9:98:1e:5c:6a:19:30:bd:6f:23:77:71:66:21:68:
         ec:ed:89:7b:c3:f2:af:7b:3b:d1:9f:eb:c8:62:fa:b3:bc:dc:
         d8:4f:01:0d:5a:e9:4b:87:18:a6:eb:71:51:ac:5d:1a:11:1f:
         4a:9b:02:15:b3:95:55:af:02:b8:62:62:38:8d:97:9e:ba:d9:
         1e:00:39:3d:10:f8:d5:f5:ec:8b:ad:98:02:19:38:1b:3a:d0:
         d7:01:9a:62:5c:b1:69:f1:72:67:51:e6:7b:ac:3a:8d:25:39:
         c2:86:c2:c8:0a:73:73:82:94:dc:0b:ed:0d:fb:b8:25:6a:6a:
         56:15:41:c1:6f:0f:4c:43:fc:69:7d:e9:cb:5e:9e:1e:d3:4e:
         4e:5d:d4:59:2a:ca:26:b4:85:f2:ad:3b:bb:53:88:fa:6d:e4:
         c3:f1:c8:f0:3e:68:20:09:7f:58:b5:3e:f0:e6:ef:36:11:5e:
         9b:7f:b0:1a:d9:c5:60:48:30:a4:13:96:29:15:b8:6c:a9:96:
         99:19:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:33:55 2026 by rpki-client