Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
File:                     S-7HT0dvsXHcjtr5SR1swnv4Di8.cer (raw, json)
Hash identifier:          hySRicLa8bFdFUWVUhBLaMP29gVMG4ajFb+2fTQx8iU=
Subject key identifier:   4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B9E3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Jun 2026 14:09:07 +0000
Certificate not after:    Thu 01 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 153669
                          IP: 163.223.36.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178659 (0x2b9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 14:09:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:77:ed:b6:85:87:4d:8e:df:e8:49:bc:c9:
                    70:a3:24:5f:cc:97:29:f2:f1:47:46:7b:c4:0e:1f:
                    e7:ec:b6:e5:34:d6:f6:e5:f6:ee:54:5d:59:83:a6:
                    ba:a0:8a:20:7d:af:fd:6b:c7:d4:53:34:83:a7:36:
                    46:43:dd:4e:b7:c0:02:31:c6:32:68:c6:a8:9b:48:
                    f9:8d:12:b6:7b:2b:58:2c:52:8e:65:7f:dc:03:56:
                    f1:58:ab:34:60:d1:20:1a:4a:7c:30:34:4d:85:0e:
                    5a:b2:f1:43:41:27:6b:d8:0e:32:18:b3:08:50:d1:
                    db:11:11:21:41:7d:99:cc:fb:08:6b:82:76:ca:da:
                    8d:4a:c8:25:eb:b3:ca:2f:e3:15:ba:aa:ac:dd:e7:
                    8e:e6:f2:64:7e:72:c0:bc:a0:33:04:06:20:29:5d:
                    d7:d5:16:2b:c9:9f:d5:ce:41:c2:66:d7:fb:a2:f7:
                    f0:51:ad:c7:cf:55:d5:1e:4b:ac:b2:e6:3f:eb:2f:
                    c6:35:01:0d:af:88:b8:32:9f:14:2f:33:ba:f2:df:
                    2a:c8:60:7e:91:3e:7c:91:1c:20:b4:69:3f:a7:60:
                    cf:3f:94:2d:91:73:15:6e:a0:84:81:40:79:6d:80:
                    a2:9d:33:93:10:fd:f9:99:91:51:b9:a1:af:26:ca:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153669

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:49:62:1f:70:9d:84:c9:dc:48:73:12:b9:e3:30:eb:81:
         a3:68:35:9b:da:e4:e6:e4:2b:b0:1b:ae:73:ab:73:8d:9e:34:
         8c:ec:12:a5:a6:a1:5d:d7:28:d5:48:97:86:04:72:7b:cf:0b:
         5b:79:83:37:fb:e0:1e:9b:c8:51:31:55:30:45:b6:b3:ba:cf:
         07:a6:64:56:97:ec:92:98:14:6b:03:a5:77:6c:09:02:d5:3e:
         3d:fa:63:84:db:94:f0:c8:7d:8b:50:ab:4b:ea:a9:75:a5:a8:
         39:5b:9c:27:05:0b:31:35:d8:06:31:4b:4e:1f:8f:ff:62:42:
         32:86:71:d9:1f:c5:60:5c:e8:e2:c1:a0:b7:eb:fb:ad:6a:14:
         b9:2c:53:95:9e:89:cc:a5:22:0e:52:1e:37:10:a2:f1:a5:d7:
         db:35:28:72:82:7d:09:a8:25:4c:12:52:8e:f5:5d:c1:ff:bc:
         72:f8:00:8f:70:5a:1d:cd:7b:75:f8:d6:f6:be:25:2f:d0:5e:
         43:2b:69:d8:82:18:ab:a9:e5:3b:15:bf:3c:5e:90:ac:da:5f:
         a9:7b:9e:4d:ca:3f:08:fe:33:40:16:49:0f:16:7d:2f:da:3a:
         0a:85:e1:8b:d1:5d:07:f4:ae:bb:18:c8:15:50:ba:76:05:de:
         4e:bf:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:58 2026 by rpki-client