Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
File:                     LXezMdgykSthvgpQpthjS44qp5w.cer (raw, json)
Hash identifier:          3BcmKJ64AErYBLC6NmLtLlEC3gd8ef9A7VIkYuSmXTc=
Subject key identifier:   2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0294E9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:22:08 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 154499
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169193 (0x294e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:22:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:d2:84:af:1f:39:26:e3:b5:03:19:03:8e:
                    34:a7:99:09:43:79:86:dc:98:0c:3b:f5:92:55:39:
                    9f:3b:ab:ae:32:df:81:76:39:a4:0d:11:57:5b:8b:
                    5e:1c:e0:db:55:54:a9:48:85:38:fe:8e:27:6b:50:
                    d9:1e:8f:64:77:db:56:9d:57:36:44:64:a6:02:90:
                    68:58:0a:4b:fa:df:f5:4a:20:b3:35:08:2f:d2:3b:
                    a0:29:13:b0:bf:b7:56:2c:8a:01:6d:9f:a0:12:0c:
                    8e:e0:31:fc:c5:b6:f7:67:06:82:5c:d4:35:c8:10:
                    8f:6f:85:ba:06:63:b5:67:98:5d:ec:09:b0:ce:ce:
                    ec:b9:dc:e0:84:b2:b2:07:66:da:79:4c:72:c2:a2:
                    08:7a:fb:5b:aa:f5:ae:37:8f:f9:c8:9d:8e:5d:c5:
                    10:2f:8f:2a:52:23:93:93:16:ee:ac:b8:d6:c9:a7:
                    75:3e:f1:c8:d1:c4:2f:22:40:5a:71:49:55:1c:72:
                    b4:27:df:f8:8c:3a:72:3e:d8:c9:89:22:74:fb:cd:
                    55:73:24:40:d9:aa:5b:ca:d7:3a:e5:e6:cb:82:d0:
                    96:d0:c6:cd:c7:fc:b8:f8:c6:0c:11:ab:cf:6b:21:
                    5e:fe:f4:55:c7:63:98:c9:da:9d:f4:95:5d:d7:b2:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154499

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:79:bc:05:0a:ad:97:40:7b:ac:00:0c:dc:3b:6e:5e:22:
         40:7e:a3:49:49:48:65:ee:d2:5c:ba:13:89:54:2f:e4:d8:b1:
         73:eb:24:a4:e5:7b:c9:2f:08:43:15:1f:d1:4f:65:63:60:d2:
         f0:d2:f8:80:a6:b3:38:7c:08:8e:ee:11:96:80:05:d2:59:35:
         2b:e2:56:34:42:ac:26:fe:51:bb:de:bd:4d:d4:9d:80:e3:5e:
         02:70:01:58:38:7e:49:c3:e1:8c:79:11:b8:b7:eb:5e:75:7f:
         23:fe:3d:c3:69:96:67:14:fa:39:00:db:64:38:c7:d9:00:42:
         55:b9:7c:30:0b:42:d2:c4:b9:56:a3:f5:ab:e7:88:a7:31:4e:
         97:e5:af:a9:c4:65:b1:87:61:d7:e9:99:10:0a:81:05:1b:76:
         fa:4a:08:43:8f:ea:eb:8c:e3:4e:f2:03:ba:6b:7c:d2:1f:a1:
         4c:20:8f:e9:f8:19:ee:b0:ee:34:87:37:39:5a:91:37:92:2b:
         58:d2:2f:e4:27:7b:e4:e6:af:82:e1:7f:c7:e6:d5:a2:21:ee:
         bd:90:9c:99:17:13:bb:68:a5:65:65:24:d9:0d:4e:f4:53:c1:
         64:58:1c:83:af:14:44:f7:27:19:df:70:13:1e:80:70:9a:6c:
         d9:6a:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:06 2026 by rpki-client