Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.cer (raw, json)
Hash identifier:          4SsgB/yeAzV+PabjZuM471N6KSyN/dhw2LhONiUZQiQ=
Subject key identifier:   09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C9E3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Aug 2026 08:34:45 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 151062
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182755 (0x2c9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 08:34:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:be:22:05:9d:ad:dc:25:b9:d6:d8:1e:f7:
                    21:d2:e3:41:11:60:98:71:a5:ad:01:aa:94:af:dc:
                    b6:b5:ca:0f:80:6a:c9:87:21:ca:0f:49:df:60:fc:
                    39:f8:44:03:35:8c:19:f0:12:2a:c8:9d:97:ca:a9:
                    ff:6a:fc:aa:49:53:ff:b8:d7:ff:65:f6:4f:ac:e0:
                    95:6c:a2:d9:78:a1:21:e2:8f:87:44:13:93:17:77:
                    89:b0:ee:56:63:ee:2d:e7:53:fa:01:a7:43:9a:6b:
                    ac:7a:19:b0:a3:fb:9a:6f:18:76:c7:16:0d:0a:3c:
                    4d:9c:cd:11:e3:9f:c6:1d:7d:4b:28:09:cc:bd:c2:
                    0c:b8:a1:57:57:77:67:21:e9:67:a4:0d:ad:b4:86:
                    c7:90:6d:29:91:6d:52:69:82:25:f9:67:fb:da:71:
                    d9:bd:11:e2:bd:e8:a5:1a:00:7c:6b:3d:08:7a:62:
                    c3:7f:cd:90:62:84:f9:f7:9e:0f:cf:c4:dd:bf:70:
                    8c:17:a7:4d:81:1f:57:17:e9:b1:cd:98:bd:3b:18:
                    92:65:b7:ff:87:8b:27:37:0d:83:58:b7:83:61:46:
                    ef:6f:01:cf:f8:c0:a5:9d:d5:e7:ee:65:fd:92:e4:
                    96:c8:17:8d:5a:ee:90:89:2d:f7:08:e5:2b:b8:fb:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151062

    Signature Algorithm: sha256WithRSAEncryption
         bd:f7:b4:a8:3c:1c:84:c8:2b:42:bf:01:23:a4:86:c8:4f:7e:
         f0:37:ad:96:f2:72:03:71:30:0d:6c:5c:f8:d5:ac:16:cb:ea:
         7a:e0:8b:ac:b0:df:1f:98:78:bd:72:6d:6e:26:5a:58:de:4c:
         ab:a3:fe:67:2f:d2:37:0d:18:ad:de:c3:07:1d:4c:ef:60:e2:
         d0:7b:7c:2b:cc:a8:c8:04:65:c0:aa:43:a5:fb:42:e5:cb:a4:
         0b:10:bb:43:cc:da:78:41:50:81:73:e2:e2:4b:de:52:39:4b:
         f3:40:05:5c:0e:62:d7:cc:6a:bb:6a:20:50:12:ca:96:66:aa:
         41:0b:18:54:c4:11:9f:80:f8:d5:d9:5d:79:0b:8d:54:f9:f5:
         d0:4b:31:12:2e:c1:38:98:37:df:38:ac:7f:95:50:f8:e2:53:
         9f:da:e0:ff:0a:e9:0c:44:b6:25:fb:d7:1f:53:ca:e9:e1:a5:
         f9:46:92:e8:44:a9:6b:99:24:2e:4e:b0:f1:77:59:af:1c:6e:
         97:e8:38:ee:e3:72:1e:ed:76:d7:16:b3:42:97:01:ed:dd:61:
         3e:fe:c7:4f:9a:68:02:d5:15:6d:f2:b8:e2:99:76:fd:e8:a9:
         3e:9f:ec:93:a4:c5:a3:ca:3e:98:25:70:2f:9b:03:8b:c2:28:
         7d:67:f6:d5
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAsnjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgwMTA4MzQ0NVoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzRDN0ExMTAvBgNVBAUTKDA5MTExMTZGQzM4RTk1REY1OTE2MzdE
OEM2NjRCNDVGQjE2RjRCREEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2F74iBZ2t3CW51tge9yHS40ERYJhxpa0BqpSv3La1yg+AasmHIcoPSd9g/Dn4
RAM1jBnwEirInZfKqf9q/KpJU/+41/9l9k+s4JVsotl4oSHij4dEE5MXd4mw7lZj
7i3nU/oBp0Oaa6x6GbCj+5pvGHbHFg0KPE2czRHjn8YdfUsoCcy9wgy4oVdXd2ch
6WekDa20hseQbSmRbVJpgiX5Z/vacdm9EeK96KUaAHxrPQh6YsN/zZBihPn3ng/P
xN2/cIwXp02BH1cX6bHNmL07GJJlt/+Hiyc3DYNYt4NhRu9vAc/4wKWd1efuZf2S
5JbIF41a7pCJLfcI5Su4+0HLAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUCRERb8OO
ld9ZFjfYxmS0X7FvS9owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NEM3QS80REYxNkREMDQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9DUkVSYjhP
T2xkOVpGamZZeG1TMFg3RnZTOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk4WMA0GCSqGSIb3DQEBCwUAA4IBAQC997SoPByEyCtCvwEjpIbIT37w
N62W8nIDcTANbFz41awWy+p64IussN8fmHi9cm1uJlpY3kyro/5nL9I3DRit3sMH
HUzvYOLQe3wrzKjIBGXAqkOl+0Lly6QLELtDzNp4QVCBc+LiS95SOUvzQAVcDmLX
zGq7aiBQEsqWZqpBCxhUxBGfgPjV2V15C41U+fXQSzESLsE4mDffOKx/lVD44lOf
2uD/CukMRLYl+9cfU8rp4aX5RpLoRKlrmSQuTrDxd1mvHG6X6Dju43Ie7XbXFrNC
lwHt3WE+/sdPmmgC1RVt8rjimXb96Kk+n+yTpMWjyj6YJXAvmwOLwih9Z/bV
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:49 2026 by rpki-client