Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
File:                     J38SJEpQvGVO5WP-c5_k63GZZrY.cer (raw, json)
Hash identifier:          bKDGjGVOr1SmKlkCgah/8y9xzdTuFZFSBtEImUQzQ/s=
Subject key identifier:   27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0299CB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:45:43 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 152181
                          IP: 36.50.144.0/23
                          IP: 2001:df3:4ac0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170443 (0x299cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:45:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:16:1b:3c:aa:b2:33:3e:1a:a0:f7:0b:f6:
                    80:f7:95:d5:29:42:5a:ad:dd:25:f8:24:6f:2b:f0:
                    72:53:9a:c7:f5:e3:c9:08:11:15:ea:ba:bf:85:e0:
                    77:67:7f:48:13:90:42:f9:73:ea:7c:61:c6:f7:ed:
                    f6:f8:c1:52:d4:1a:02:85:56:fb:cb:e1:cc:8a:e4:
                    c0:33:de:3f:91:d2:19:61:7e:be:1c:9a:a4:63:34:
                    83:e7:69:62:cb:45:33:70:6b:74:fe:0b:64:8a:1d:
                    f2:16:40:63:79:16:be:14:a1:4a:66:14:e3:96:71:
                    c2:f1:09:35:fd:67:8f:27:68:ee:7b:20:c6:35:d7:
                    7a:9c:00:b3:53:63:d6:b7:ab:d1:7b:1e:c1:3d:cd:
                    6a:58:87:80:b3:62:85:90:d6:ae:7e:f5:b4:78:d6:
                    34:1c:81:c3:c3:36:53:34:70:d2:7a:33:f2:4a:d1:
                    0e:4a:32:f4:8d:29:67:32:d2:0f:60:4c:67:6b:1b:
                    44:9b:48:13:4b:85:15:a9:05:61:32:db:40:7d:74:
                    6b:11:5c:4e:70:fc:14:c9:27:72:d8:31:e5:7a:4f:
                    da:36:b2:81:0b:42:11:03:57:86:28:9c:42:e0:46:
                    5b:ff:55:5a:89:53:5e:75:99:66:49:f3:8d:f8:c1:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152181

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.144.0/23
                IPv6:
                  2001:df3:4ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:59:ee:0d:e1:09:5f:88:0c:68:c6:9f:57:c4:87:92:f2:
         a8:8f:e7:19:ec:89:cd:d8:e7:59:d1:a6:c9:1e:04:b9:3e:8b:
         83:cf:e8:45:79:d6:47:f7:86:9c:43:cd:a6:f3:c9:d4:7f:b6:
         32:f2:00:d3:7c:a3:49:fe:e0:bb:f9:88:2e:50:77:3e:fd:da:
         c9:87:26:f2:fc:89:c8:8b:48:52:ab:4a:34:00:be:3b:99:ba:
         aa:e7:2a:29:0b:f8:03:c4:74:8b:03:30:93:ec:0d:94:50:fe:
         be:8c:05:8a:00:37:bb:a7:26:a4:8b:bf:7c:4b:f0:2a:65:3f:
         66:40:47:52:68:72:11:e1:9f:b6:f0:ae:45:e7:98:7f:9c:2a:
         08:0f:0f:20:55:c8:6f:56:d2:38:fb:57:a4:11:fc:18:dc:08:
         15:ee:b0:41:2f:21:5e:e3:bc:aa:32:56:04:1c:1d:87:53:bc:
         a0:8d:7a:31:54:35:fe:9b:b4:3c:4e:5d:e3:31:97:7a:39:fc:
         69:87:f1:9e:f3:10:01:8a:ec:16:0e:66:af:35:39:61:84:d0:
         17:d6:58:fa:21:71:55:ce:96:85:2c:b6:05:60:c4:43:c7:8f:
         46:0b:3b:3e:41:2e:74:ea:34:0c:0f:54:8f:ec:c1:88:bf:8e:
         5e:d0:3a:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:19 2026 by rpki-client