Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V3eRdfcDbN-VAi541x9AJGhYWYc.cer
File:                     V3eRdfcDbN-VAi541x9AJGhYWYc.cer (raw, json)
Hash identifier:          eKJOqMRY+KVKMBeGQLXxU1keAfZKm0h30UdGIzzoWt0=
Subject key identifier:   57:77:91:75:F7:03:6C:DF:95:02:2E:78:D7:1F:40:24:68:58:59:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0297D6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:36:55 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 142181
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169942 (0x297d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:36:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A919603C, serialNumber=57779175F7036CDF95022E78D71F402468585987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:59:13:0b:4f:fc:75:09:85:b5:e0:c7:a1:
                    59:74:83:7d:e8:ca:76:89:7a:a1:a7:1c:51:6d:1f:
                    60:85:f8:17:76:b8:b0:10:39:26:99:95:dc:3a:a7:
                    0b:d0:02:8c:08:9a:8a:3a:06:d1:37:e7:32:95:2c:
                    a0:5f:84:f1:f9:29:0c:c2:fe:ea:5b:d0:4e:61:b1:
                    01:6e:41:90:1e:b8:2a:3c:0c:6b:26:d3:d4:af:f8:
                    51:6e:98:8b:9c:96:f8:12:9e:1f:2d:25:cf:ee:ce:
                    cb:90:3f:0f:42:7d:f4:4c:ba:06:52:39:3d:fc:9e:
                    31:57:52:5a:bc:d0:21:5d:c4:c5:08:7f:d4:86:9d:
                    e2:6f:dc:d4:4f:fa:0b:9d:32:58:96:c5:dd:86:5b:
                    96:6f:f9:b7:19:bb:4d:30:b0:dd:2b:c9:0d:c1:69:
                    a9:63:17:0d:15:98:31:19:6d:e2:f8:18:6c:70:4d:
                    6c:74:7a:2c:91:71:53:5c:b8:64:d2:88:32:53:c7:
                    a3:c7:38:dd:4f:ea:85:24:88:09:39:13:b0:ee:14:
                    a8:4a:07:75:98:94:57:b5:e1:b4:ae:6d:fb:c4:71:
                    e9:57:2a:15:c4:0f:81:96:59:d7:ef:2d:09:2c:6f:
                    c6:1e:ed:0b:0b:2c:92:93:7b:79:b1:d9:31:08:26:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:91:75:F7:03:6C:DF:95:02:2E:78:D7:1F:40:24:68:58:59:87
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142181

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:4f:42:e4:e8:b5:7d:31:51:eb:4f:b0:fe:fb:ad:99:ec:
         84:48:d7:e5:58:95:0c:b0:f1:d5:c4:59:af:6f:16:c3:2d:2c:
         e6:44:93:b9:e5:30:26:69:5a:8a:c1:9c:a0:4c:b4:31:77:eb:
         6c:07:42:ad:e2:70:68:54:b2:94:59:df:de:ab:6e:ef:81:37:
         71:f1:26:24:63:2a:af:4d:ec:1d:dc:b1:73:d2:47:43:7b:44:
         3d:0d:db:59:a1:ed:38:fc:31:aa:77:f5:55:b8:25:2a:1a:90:
         35:f1:ea:ba:fd:15:18:4c:a8:c1:b7:95:4f:d9:19:a2:d5:46:
         28:65:95:4d:ec:a2:a4:36:04:49:36:ea:d3:8b:98:27:cb:e6:
         c9:65:90:de:b3:01:28:6b:78:55:28:29:07:a3:f2:cd:82:19:
         09:6f:0c:aa:0e:15:7e:92:5e:9f:3f:f1:6f:bf:b7:0e:5f:72:
         cb:98:f8:74:db:f6:14:ac:ba:4b:ce:fb:61:b8:16:2f:1b:ac:
         6c:8c:9c:70:d8:f6:fb:10:74:a3:cb:68:f2:2b:99:63:f8:88:
         1b:88:85:be:3a:c2:b9:27:4b:5d:9e:bc:0e:b8:e3:0b:c6:e3:
         f1:67:d6:ce:77:a3:f1:bc:97:75:12:08:a9:76:a2:c4:eb:c0:
         01:6b:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:30 2026 by rpki-client