Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer
File:                     PLCVZot9dMLxtwBa-hWfT-UiUgo.cer (raw, json)
Hash identifier:          Z3r4WZgO9qXIAdMjeMCyCgC0zyrh0FR8siWd3rbBEuA=
Subject key identifier:   3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B723
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 May 2026 14:01:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 142250
                          AS: 154316
                          AS: 154319
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177955 (0x2b723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 14:01:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91A423D, serialNumber=3CB095668B7D74C2F1B7005AFA159F4FE522520A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:1d:5c:6f:33:1a:68:b5:cd:b8:d2:88:c3:
                    30:29:5e:0e:29:6a:57:65:5d:ab:33:ce:1d:7c:81:
                    26:ff:e3:a4:5b:5e:4e:57:43:b3:1d:cd:d5:fb:97:
                    48:e9:ff:35:1c:ae:bc:09:62:81:58:21:12:97:95:
                    f0:5e:9b:1e:78:e8:c9:a6:21:07:84:4e:ca:ce:ec:
                    bf:f1:80:35:8b:03:35:f6:fb:0f:6c:98:8a:a8:1c:
                    27:39:1f:17:85:05:fd:af:c7:2b:91:99:68:a4:86:
                    eb:ec:c3:51:3d:1a:11:7e:ba:d8:18:64:36:f6:4c:
                    15:8d:8a:3f:6a:67:ff:bb:3d:09:e4:f7:72:21:14:
                    03:bc:7e:7c:83:b6:1c:55:b5:10:50:13:61:99:28:
                    1c:ab:a7:43:71:03:28:39:21:4f:0c:aa:5e:d1:41:
                    5a:45:32:aa:10:5f:c9:28:75:d8:cc:67:4f:46:cf:
                    5c:6d:0a:9d:90:8b:35:98:ad:63:b9:2b:25:eb:f2:
                    5c:ad:14:93:2b:dc:be:4b:ea:43:9d:81:fb:c3:67:
                    81:85:1d:dc:d8:60:75:28:45:4b:ad:98:8c:05:5d:
                    57:f1:d3:f0:e3:25:65:8b:36:66:42:87:73:b5:5a:
                    13:25:3b:37:4e:47:ab:52:16:32:12:18:7b:71:a7:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142250
                  154316
                  154319

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:ba:f9:af:66:c6:3d:1a:85:e1:2e:22:fb:f4:4a:de:fa:
         af:ee:6a:0e:5b:f0:51:ce:b6:64:2c:1d:87:10:85:1f:ad:f3:
         62:e4:07:80:85:c0:f9:d7:b6:0d:09:bd:8f:98:bb:39:27:bc:
         15:fb:06:b7:2e:6f:cc:86:ea:9d:ab:32:69:d3:b7:20:a6:4e:
         21:10:bf:d4:88:5f:94:65:d0:1d:c3:83:fb:63:e5:0a:d7:21:
         7e:bd:4c:43:28:cb:9a:07:f8:cc:80:67:d0:77:2f:93:a5:99:
         8e:1c:aa:62:44:76:da:c9:06:e3:9e:a0:38:7a:8e:40:74:06:
         94:62:9f:c9:11:51:28:4e:20:d1:db:88:f3:82:02:08:5d:0e:
         d8:07:eb:04:69:fb:cb:15:2d:fa:a1:4f:1f:03:d0:5a:eb:f5:
         60:c0:28:db:29:9b:6f:85:0a:ff:1b:08:03:0f:34:7b:d4:7f:
         c5:2f:04:4c:ce:9a:e0:df:75:5c:a1:f6:00:02:04:de:6c:21:
         e7:79:a4:2c:a9:a9:85:6e:3b:9e:20:af:f5:29:f9:2e:83:5f:
         d4:c5:15:c9:4d:1a:70:75:15:49:89:78:29:fe:3f:90:51:ad:
         1d:c3:4e:0b:ab:f5:a8:1a:27:0b:c7:b2:d7:a0:ac:cd:1c:df:
         9b:c8:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:05 2026 by rpki-client