Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
File:                     VVw2dp0ODDACycjXBRYwXZYTazg.cer (raw, json)
Hash identifier:          RhLCBSCfhiCrBt5RHSAHBnPis1bWDoM3x/KP4LZCcMM=
Subject key identifier:   55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BA14
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 10:17:59 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 154694
                          IP: 2001:df7:1240::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178708 (0x2ba14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 10:17:59 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9165746, serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:0e:ca:e0:f6:ed:86:35:66:e2:25:da:be:
                    61:45:8d:8a:47:83:2f:d0:0c:6e:4e:e7:d1:c6:19:
                    74:f1:5b:e8:c8:4f:49:dd:4b:b2:66:e7:0a:27:30:
                    e8:a5:00:02:b3:32:ce:bf:e2:21:25:d9:26:15:84:
                    21:82:ae:34:83:99:bd:75:53:ba:2c:6e:05:e7:fc:
                    42:5d:d0:de:1b:5c:ca:b4:20:eb:79:c3:bc:6f:4c:
                    be:73:7c:e5:ad:3a:fe:81:54:10:c1:e1:cb:1b:f9:
                    9a:d0:f7:f4:63:ed:f4:53:ae:68:2e:6a:ad:63:a1:
                    9d:f6:a2:f8:c2:cf:b3:07:1d:cc:fa:cf:75:06:4b:
                    93:f2:a8:5b:3e:e7:9e:0c:b2:80:b3:fc:64:65:51:
                    d6:db:d4:0e:67:07:6d:5b:cc:42:b5:9b:9c:7c:32:
                    f8:82:50:49:f6:91:72:d0:31:cd:af:cb:0c:fd:1d:
                    be:6c:7d:a7:55:0f:ab:c4:b0:6c:38:56:c0:fb:90:
                    0e:f9:7b:98:0a:f6:28:56:9c:96:f9:6a:a9:ff:d8:
                    76:99:cb:86:84:2e:17:60:79:1e:1c:f8:ba:ab:ca:
                    18:50:23:dd:30:08:01:df:77:6a:dc:6f:a7:d4:4a:
                    58:28:ca:d7:9f:e8:b3:d6:bd:30:8c:15:7e:ee:ac:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154694

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1240::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:4d:20:f9:06:aa:be:ae:31:70:cc:e0:f7:7f:dd:f8:ed:
         9f:2e:ab:05:13:e4:b0:4d:f2:b2:de:5a:c7:5f:87:85:30:b1:
         b5:a1:10:db:bd:bf:16:ea:5a:21:74:e2:8e:95:ea:70:fb:eb:
         da:95:77:f4:73:ff:02:7a:58:2d:8a:e2:c7:10:3a:b0:9c:d9:
         f6:a5:b9:12:29:ca:67:96:5a:c9:e5:86:e7:4d:90:90:32:b4:
         18:5e:42:9f:f3:f5:28:0d:f5:a4:06:31:9a:c8:17:b3:6b:18:
         31:45:01:a1:57:54:1c:d3:e7:04:4b:92:0a:42:40:56:34:10:
         d7:12:38:9f:fd:61:4c:72:55:7f:79:71:b8:55:c5:95:8b:07:
         65:85:6f:81:e3:82:62:df:e5:42:56:40:0a:24:bf:ef:3c:45:
         52:1a:61:73:07:f7:d6:df:80:ee:7b:2c:0e:a2:9f:34:76:68:
         cc:3c:99:42:db:db:34:38:2f:5d:64:1d:5a:ac:45:7c:ff:7d:
         6d:58:34:09:6e:8b:47:24:6c:45:52:5d:db:34:1a:9f:6f:4b:
         67:16:3e:e9:a9:6b:d2:a4:c2:1a:63:54:35:5b:5e:5f:08:a7:
         c0:60:6c:33:38:76:df:e1:41:26:8e:09:63:81:4d:4c:d1:1a:
         a6:b2:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:05 2026 by rpki-client