Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
File:                     KL7nBASyQwlkwwKSkNPqYEyRDrE.cer (raw, json)
Hash identifier:          5RKCt7iVnLMuOekRLRT0TXfJVWLorhkiSd7HgI0E5IM=
Subject key identifier:   28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B54A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 18 May 2026 13:09:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 151366
                          IP: 163.223.115.0/24
                          IP: 2401:fde0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177482 (0x2b54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 18 13:09:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:b9:2b:fa:72:e9:62:98:34:69:10:70:cc:
                    a2:bd:2b:07:bf:ca:5c:89:33:4c:e6:5f:60:7e:ff:
                    73:5e:5a:e9:4e:bc:54:cd:04:f0:42:57:9f:96:d7:
                    7a:6d:2e:bf:c5:ab:54:7e:f5:c8:3a:68:d9:7a:a9:
                    7e:f5:94:64:be:8c:d6:e5:da:55:f0:cd:fe:f2:3c:
                    14:48:f8:8b:a8:71:10:d4:3d:b2:5b:03:c7:a4:30:
                    69:04:43:66:d8:4a:99:b6:aa:22:a4:3f:f0:4a:a8:
                    e3:b6:d5:3a:61:94:cd:2d:7b:3d:1b:5a:92:26:d3:
                    76:f1:12:e9:91:cc:bd:52:59:93:50:8a:48:95:df:
                    79:f5:9d:00:87:f6:57:0f:12:6a:30:f3:2c:17:72:
                    f6:11:23:66:d3:05:1e:9d:66:7e:cc:ea:4d:cf:23:
                    92:93:3d:66:4b:b8:da:44:9f:05:7f:48:4c:32:c4:
                    7e:a0:2d:15:00:a5:bc:12:d1:54:31:d5:de:7d:7d:
                    52:6e:ce:0f:28:a1:a2:bb:74:8c:4f:9d:da:1f:03:
                    a2:66:7f:d2:bf:3c:d7:48:59:af:f1:40:e9:48:af:
                    a9:7f:95:0e:f1:a8:42:7d:6d:12:6b:12:01:59:84:
                    a5:43:4a:11:40:0f:95:06:de:26:2c:b9:5a:8d:f2:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151366

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.115.0/24
                IPv6:
                  2401:fde0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:83:0d:3f:a6:ea:0b:8b:9f:08:69:47:7b:61:3d:8a:10:2e:
         82:64:2c:83:71:a9:70:ac:32:33:ba:56:b2:bb:98:37:be:7b:
         bb:5d:7c:24:0f:43:fc:d2:8a:8f:a7:00:c1:44:d5:4d:52:53:
         f1:80:8a:e9:55:54:84:ed:94:b8:fc:af:51:bc:cd:3f:53:da:
         29:f8:cb:c0:86:92:77:ec:23:f8:6b:5b:c9:2d:6a:2b:3f:a3:
         92:06:df:cc:db:74:d3:47:80:05:08:fb:9c:6b:1f:ee:57:ae:
         35:a4:3a:a7:c6:98:cb:6a:e5:59:7f:fc:d8:dd:a2:e7:78:5a:
         58:be:a3:c9:9b:4c:6c:c8:d8:3d:58:b1:21:10:cf:b1:2b:2f:
         a5:cc:17:22:ee:d1:fa:f7:49:49:7e:0f:21:76:77:03:b9:4e:
         c4:c8:f5:51:94:e3:cc:a9:55:38:b7:aa:29:34:e4:7e:4e:c6:
         09:36:18:48:41:16:c3:72:43:19:4e:80:f6:ec:95:6e:d2:3b:
         2a:4b:80:20:48:6f:3c:c2:9c:e5:ba:df:af:3d:7d:d2:c3:18:
         e3:1d:b0:12:da:09:ed:d2:38:ef:a3:5c:0a:49:c7:fe:66:24:
         da:46:be:0a:10:2c:11:96:a4:bf:87:8d:ae:09:26:f3:50:6c:
         a7:fb:7b:7b
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArVKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxODEzMDkxMVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5
MjkwRDNFQTYwNEM5MTBFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/X7kr+nLpYpg0aRBwzKK9Kwe/ylyJM0zmX2B+/3NeWulOvFTNBPBCV5+W13pt
Lr/Fq1R+9cg6aNl6qX71lGS+jNbl2lXwzf7yPBRI+IuocRDUPbJbA8ekMGkEQ2bY
Spm2qiKkP/BKqOO21TphlM0tez0bWpIm03bxEumRzL1SWZNQikiV33n1nQCH9lcP
Emow8ywXcvYRI2bTBR6dZn7M6k3PI5KTPWZLuNpEnwV/SEwyxH6gLRUApbwS0VQx
1d59fVJuzg8ooaK7dIxPndofA6Jmf9K/PNdIWa/xQOlIr6l/lQ7xqEJ9bRJrEgFZ
hKVDShFAD5UG3iYsuVqN8nODAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUKL7nBASy
QwlkwwKSkNPqYEyRDrEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFT
eVF3bGt3d0tTa05QcVlFeVJEckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk9GMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAo99zMA0EAgAC
MAcDBQAkAf3gMA0GCSqGSIb3DQEBCwUAA4IBAQCBgw0/puoLi58IaUd7YT2KEC6C
ZCyDcalwrDIzulayu5g3vnu7XXwkD0P80oqPpwDBRNVNUlPxgIrpVVSE7ZS4/K9R
vM0/U9op+MvAhpJ37CP4a1vJLWorP6OSBt/M23TTR4AFCPucax/uV641pDqnxpjL
auVZf/zY3aLneFpYvqPJm0xsyNg9WLEhEM+xKy+lzBci7tH690lJfg8hdncDuU7E
yPVRlOPMqVU4t6opNOR+TsYJNhhIQRbDckMZToD27JVu0jsqS4AgSG88wpzlut+v
PX3SwxjjHbAS2gnt0jjvo1wKScf+ZiTaRr4KECwRlqS/h42uCSbzUGyn+3t7
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:02:43 2026 by rpki-client