Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
File:                     NpBAbdMULvZPdhZKfyJsCMwwG1M.cer (raw, json)
Hash identifier:          grPEQR8ALOqqhOPH+kGgjwj3SrjTH6hhbqjLKaHawM0=
Subject key identifier:   36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D6A4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 17 Sep 2026 04:16:27 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 154289
                          IP: 2001:df7:8a40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186020 (0x2d6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 17 04:16:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:f4:57:4e:9c:7d:6d:88:b4:44:69:f0:ee:
                    4f:8c:a8:88:26:96:3f:f9:a6:35:28:c1:fa:df:e4:
                    f9:da:5b:fc:2c:7e:71:5f:55:6b:16:49:d1:ec:50:
                    27:e2:9f:e4:9d:72:d7:8c:1c:be:72:67:f5:5e:f6:
                    db:6a:c9:d9:d7:c4:7f:5d:7e:69:eb:17:b4:09:32:
                    79:5a:6f:79:27:36:d2:01:68:69:37:33:26:ea:a1:
                    27:1f:a8:bb:46:fc:d8:e8:79:ea:51:75:6f:5b:78:
                    6f:0f:d2:74:f3:fe:09:8e:9c:e8:e7:e5:f3:5e:10:
                    28:2e:2b:24:96:65:8d:56:5a:68:3c:d3:24:b2:22:
                    c8:f2:2d:74:4d:08:93:9f:27:d2:0f:7e:9b:49:53:
                    ea:49:be:d7:13:0e:d7:ab:9b:ab:d4:bf:3e:f8:72:
                    b5:4e:bb:c5:ae:be:52:7d:72:99:c6:2b:ab:6e:95:
                    c5:51:d1:5e:90:9a:bc:ad:15:59:34:25:ab:73:d1:
                    2a:3e:52:ff:b7:b7:0d:d8:b8:dc:82:ed:99:28:d7:
                    05:27:43:b2:1a:94:4f:e8:bf:93:bf:9a:0f:72:06:
                    6d:03:27:1a:84:9d:ca:38:6c:4e:99:5d:53:ac:a6:
                    38:ae:79:11:6b:44:04:ab:91:0f:10:ec:9f:e5:46:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154289

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:8a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:1d:f5:96:4a:71:17:a1:b1:64:b5:1d:77:f6:8a:67:5a:32:
         91:b4:6a:14:4f:f3:fc:d8:2f:b6:91:f7:54:72:74:b2:74:4e:
         6f:c5:fc:d4:10:46:ee:26:84:86:f5:d4:15:d1:00:f6:3d:05:
         a0:e8:a0:61:42:34:f1:ce:83:8f:bd:0c:ca:fc:59:be:67:9d:
         28:57:98:cf:2c:be:1e:67:0c:b2:12:72:f8:43:f1:4c:25:5d:
         90:2f:c8:9f:59:e9:c4:cd:1c:7a:8d:ca:0c:6d:1c:7d:7e:0d:
         d0:0c:c1:d3:ab:33:0a:44:28:d5:38:e5:80:1b:3d:33:b4:63:
         05:d5:84:bf:dc:82:5a:43:ff:23:6a:db:99:d0:1d:d1:63:db:
         03:e8:6d:db:f6:22:0f:3c:5c:91:af:25:c1:a0:7b:ed:9b:9a:
         a2:be:5e:dd:8f:58:5b:98:32:6a:2c:bd:4b:43:f3:34:77:91:
         87:19:fd:4d:a4:05:c2:83:90:92:de:4c:e6:da:22:22:27:ab:
         44:12:13:5e:5c:eb:f4:ae:b5:e0:09:a0:4a:fa:2b:60:7c:32:
         f1:47:0b:3e:90:19:bb:45:8f:84:2a:58:0d:77:b4:f5:45:6b:
         b1:75:2f:43:1b:30:f3:ba:33:f6:29:94:75:2d:65:42:f9:a9:
         71:35:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:07:14 2026 by rpki-client