Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uvvOLZi_w2aQXBV7j4-eqAWgWk.cer
File:                     _uvvOLZi_w2aQXBV7j4-eqAWgWk.cer (raw, json)
Hash identifier:          Pbr2cLTWSz/umvQ8ATPD9y0PRiidtM3zuRFqWvmRoq0=
Subject key identifier:   FE:EB:EF:38:B6:62:FF:0D:9A:41:70:55:EE:3E:3E:7A:A0:16:81:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BAB5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155BAE/4D8077405F5F11F190CCD7CC8E47A888/_uvvOLZi_w2aQXBV7j4-eqAWgWk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155BAE/4D8077405F5F11F190CCD7CC8E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 15:17:19 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 136459
                          IP: 202.37.152.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178869 (0x2bab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 15:17:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9155BAE, serialNumber=FEEBEF38B662FF0D9A417055EE3E3E7AA0168169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:a5:0b:11:1e:9c:c8:66:81:69:bf:c2:96:
                    ef:0c:32:2d:13:62:31:82:ca:a5:ad:9c:8c:9d:20:
                    2c:67:7f:fe:f2:b1:b1:3c:93:61:2c:0a:8c:f5:3a:
                    8c:7b:64:c6:a5:6c:f2:88:b8:e9:4b:26:75:6a:ed:
                    b3:79:31:1f:7d:b3:f7:c6:ea:19:04:24:74:c6:ff:
                    97:8b:19:e6:32:17:01:27:98:1c:a9:23:dc:c4:a1:
                    36:59:9a:37:13:ae:66:b9:9a:2d:bd:40:21:87:4a:
                    7f:26:5f:d5:7b:c1:84:0c:6b:1e:89:0e:c2:fb:5e:
                    71:7d:d0:17:05:5a:ae:ea:94:89:09:94:58:a6:41:
                    f6:15:0f:cf:2f:95:d3:eb:7d:bd:33:d0:a4:25:f2:
                    4b:d7:b6:2b:db:3e:58:15:6e:61:a4:cd:2d:b5:3b:
                    72:d1:29:65:25:9a:31:75:4f:b8:72:e1:9e:79:3e:
                    09:96:b7:44:1b:3f:75:a9:b6:bf:f4:85:14:cb:f4:
                    63:d8:5f:71:8a:5a:82:dd:25:09:e6:58:fc:9e:29:
                    fb:c4:9a:97:70:3f:b2:0d:1e:ae:05:52:60:2f:2d:
                    2a:4b:be:01:a2:ab:f2:ca:c4:dd:7f:42:de:87:c2:
                    f8:57:2c:2a:4f:bb:38:cb:55:d8:45:8a:f8:26:22:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:EF:38:B6:62:FF:0D:9A:41:70:55:EE:3E:3E:7A:A0:16:81:69
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155BAE/4D8077405F5F11F190CCD7CC8E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155BAE/4D8077405F5F11F190CCD7CC8E47A888/_uvvOLZi_w2aQXBV7j4-eqAWgWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136459

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:30:fc:b2:b5:20:f4:e1:41:3f:e5:06:45:04:6e:69:7c:d3:
         84:c8:59:5f:43:2d:ad:cd:5c:6e:9a:2a:9a:eb:02:dc:43:84:
         11:b8:88:05:94:1d:ce:84:48:f1:32:2e:55:71:3f:a9:b9:53:
         fe:b2:67:d8:66:e7:79:ba:19:71:64:b0:f7:88:20:84:38:5b:
         f7:f7:ab:7e:85:2d:37:f3:bb:42:89:5e:ae:0b:ba:0b:d4:bf:
         42:10:75:8b:7b:3a:9c:88:56:17:29:93:3b:88:c6:05:a8:9c:
         73:20:9e:02:d8:8d:a3:d1:60:14:5c:47:3a:67:8d:bf:bd:6c:
         ca:09:24:38:64:4a:47:89:82:bd:96:86:ee:d0:5c:66:2d:1e:
         36:0a:9f:56:be:0c:a6:53:f8:f8:69:38:8a:cb:c5:b3:7a:35:
         13:76:6e:c7:71:16:2e:97:4b:1e:ab:2f:bf:a6:ec:08:74:e8:
         a1:0f:03:66:59:bb:4f:69:c9:78:39:11:4f:54:af:ce:62:af:
         c5:4f:c8:9f:45:0b:50:e9:95:13:3d:b6:82:01:67:3b:bd:40:
         88:7a:df:c4:be:4f:57:fc:dd:5c:77:3b:83:e9:f2:4d:7f:cd:
         db:8c:47:28:bb:36:30:6f:c0:9b:dc:1c:0f:84:ed:de:41:73:
         5a:d9:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:04 2026 by rpki-client