Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsZl4UCMw80OhZxyyUpEqaHDtXg.cer
File:                     NsZl4UCMw80OhZxyyUpEqaHDtXg.cer (raw, json)
Hash identifier:          pUwCqqy6ZfgjcN4SIDtq316TKG0b6FFmb1UmIC9plyw=
Subject key identifier:   36:C6:65:E1:40:8C:C3:CD:0E:85:9C:72:C9:4A:44:A9:A1:C3:B5:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B7D7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/NsZl4UCMw80OhZxyyUpEqaHDtXg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 29 May 2026 06:18:24 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 45660
                          IP: 202.58.125.0/24
                          IP: 2001:df6:bfc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178135 (0x2b7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 29 06:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91F6719, serialNumber=36C665E1408CC3CD0E859C72C94A44A9A1C3B578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:ce:6c:60:c7:94:74:8a:c8:8a:11:60:6e:
                    50:bb:ef:e8:32:d6:97:be:55:b8:d3:35:06:eb:48:
                    83:59:80:c2:dd:63:97:78:c7:b6:32:f0:76:df:01:
                    8c:c0:dd:a1:30:b9:6b:a7:52:ad:4e:6c:04:8f:2e:
                    eb:43:71:e8:50:56:50:77:46:2c:f0:4d:5b:d5:0b:
                    7b:f1:54:af:e9:0b:06:3c:e5:09:ea:58:30:b4:9a:
                    c6:87:ea:bd:b5:33:ea:e0:d7:67:12:49:a7:3d:67:
                    c4:07:6d:6d:9b:cf:54:d1:fa:26:6c:34:66:19:c9:
                    21:6c:5a:63:82:35:cc:43:95:16:76:b7:16:62:ae:
                    6a:4f:e5:30:ae:60:1e:03:e0:e3:a0:dc:57:52:4a:
                    f9:94:2d:b1:48:30:b1:cc:4e:30:4f:62:bb:e4:1c:
                    5e:cb:cf:0b:b6:40:98:17:5d:1c:65:0b:3c:d7:f4:
                    a5:2b:7b:df:29:1b:4d:58:b8:f8:82:1e:90:e2:70:
                    f1:ea:1c:dc:93:72:7e:0b:70:1f:fc:58:d0:3b:2a:
                    42:10:0b:aa:5d:06:0d:8d:66:a5:15:02:fa:86:e1:
                    f4:2c:cb:a5:99:b5:2b:a7:a8:38:6a:7c:9f:46:12:
                    4c:7d:54:3a:3f:fb:0b:cc:59:81:9a:74:24:33:28:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:65:E1:40:8C:C3:CD:0E:85:9C:72:C9:4A:44:A9:A1:C3:B5:78
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/NsZl4UCMw80OhZxyyUpEqaHDtXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45660

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.125.0/24
                IPv6:
                  2001:df6:bfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:6a:84:f5:b3:9b:58:7e:43:28:51:07:9a:e8:96:f1:d6:80:
         c0:f1:87:26:e2:b9:02:82:12:2f:e6:a4:7d:e4:a4:4d:32:97:
         d5:3e:14:5c:4b:9f:3a:f2:4a:3b:80:fc:5e:63:07:0b:be:8f:
         90:49:8e:2d:20:e9:b6:32:90:3f:68:51:23:b0:35:42:07:7d:
         d7:ed:a8:3e:ea:f7:75:a9:19:28:b4:94:6c:e8:3f:07:82:c2:
         5e:29:1a:0a:c7:38:1b:b1:11:e8:5a:de:0c:fc:b4:38:b9:a4:
         d7:75:c6:88:e2:6d:df:25:58:6b:dc:b0:a6:28:7f:6e:ef:61:
         7b:90:6e:7b:18:01:52:18:0e:d0:24:a2:95:18:9d:28:91:67:
         bd:42:86:14:fa:a7:f1:4a:36:b9:73:9e:80:db:4c:96:28:96:
         4f:5e:93:a8:e5:86:e6:44:2f:91:69:ec:01:dd:7f:08:dc:0a:
         76:7d:ee:f5:33:dd:4a:0e:9a:4f:59:0d:b6:9f:df:9b:a8:76:
         e6:6b:b2:9b:06:e0:df:6d:db:56:f3:bf:4b:6a:72:47:30:95:
         e1:bc:be:e5:8b:e6:5e:35:59:f3:27:a2:44:e1:16:66:6b:80:
         9a:dc:33:cf:5e:28:90:2e:ec:75:96:f0:6e:64:98:3c:8a:0d:
         8e:24:65:f1
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDArfXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyOTA2MTgyNFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjY3MTkxMTAvBgNVBAUTKDM2QzY2NUUxNDA4Q0MzQ0QwRTg1OUM3
MkM5NEE0NEE5QTFDM0I1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2js5sYMeUdIrIihFgblC77+gy1pe+VbjTNQbrSINZgMLdY5d4x7Yy8HbfAYzA
3aEwuWunUq1ObASPLutDcehQVlB3RizwTVvVC3vxVK/pCwY85QnqWDC0msaH6r21
M+rg12cSSac9Z8QHbW2bz1TR+iZsNGYZySFsWmOCNcxDlRZ2txZirmpP5TCuYB4D
4OOg3FdSSvmULbFIMLHMTjBPYrvkHF7Lzwu2QJgXXRxlCzzX9KUre98pG01YuPiC
HpDicPHqHNyTcn4LcB/8WNA7KkIQC6pdBg2NZqUVAvqG4fQsy6WZtSunqDhqfJ9G
Ekx9VDo/+wvMWYGadCQzKJYRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNsZl4UCM
w80OhZxyyUpEqaHDtXgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY2NzE5LzMwMjg3Mzg4NUIyNjExRjFBRTg1MjdEOUI2ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNjcxOS8zMDI4NzM4ODVCMjYxMUYxQUU4NTI3RDlCNjgzMzc3My9Oc1psNFVD
TXc4ME9oWnh5eVVwRXFhSER0WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALJcMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyjp9MA8EAgAC
MAkDBwAgAQ32v8AwDQYJKoZIhvcNAQELBQADggEBANVqhPWzm1h+QyhRB5rolvHW
gMDxhybiuQKCEi/mpH3kpE0yl9U+FFxLnzrySjuA/F5jBwu+j5BJji0g6bYykD9o
USOwNUIHfdftqD7q93WpGSi0lGzoPweCwl4pGgrHOBuxEeha3gz8tDi5pNd1xoji
bd8lWGvcsKYof27vYXuQbnsYAVIYDtAkopUYnSiRZ71ChhT6p/FKNrlznoDbTJYo
lk9ek6jlhuZEL5Fp7AHdfwjcCnZ97vUz3UoOmk9ZDbaf35uoduZrspsG4N9t21bz
v0tqckcwleG8vuWL5l41WfMnokThFmZrgJrcM89eKJAu7HWW8G5kmDyKDY4kZfE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:23 2026 by rpki-client