Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer
File:                     eNHeHdP-GGK__ued6u14itywCwc.cer (raw, json)
Hash identifier:          qWAzeLJdAclwhHT/ZQj1oVpE6dIubwHkkTaouMKfELY=
Subject key identifier:   78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0291FC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:07:24 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 154438
                          IP: 2001:df6:74c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168444 (0x291fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:07:24 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91811D8, serialNumber=78D1DE1DD3FE1862BFFEE79DEAED788ADCB00B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:00:2f:4f:1b:14:8b:64:e3:13:9b:6f:b2:
                    81:df:fe:3c:fe:31:24:f0:5c:c0:6f:33:3d:ce:0d:
                    6d:f0:66:53:b2:1e:91:14:e3:d1:22:f3:f1:40:df:
                    87:54:b6:ba:a9:2b:e0:93:2b:c9:15:f4:20:15:ba:
                    ed:31:da:ab:e6:bb:74:9b:e7:c0:07:c6:f2:36:70:
                    f6:15:6a:59:d3:66:eb:fa:5e:db:44:fd:4f:29:71:
                    b2:17:09:69:2f:4c:6c:06:0e:ad:0d:fb:0f:04:33:
                    9c:55:c8:f6:5c:94:a1:44:19:89:ff:33:ba:5e:c7:
                    92:a3:53:98:95:fb:6a:99:be:84:c8:75:51:e6:f8:
                    f9:09:98:b6:71:cb:67:b0:0f:6c:df:45:6a:d4:cd:
                    27:17:8c:0d:5e:43:ae:f8:05:21:bf:9a:f1:75:2a:
                    59:9d:e8:b6:05:aa:60:ff:32:3d:13:6c:7d:5f:d2:
                    be:81:d5:de:8c:c0:70:d6:57:02:5d:b1:c6:ef:42:
                    c5:36:41:19:c7:1c:11:76:e9:c2:04:ed:f7:b7:62:
                    e1:ad:bc:13:ab:85:1b:ee:f4:c1:a5:04:b1:4b:cb:
                    56:e3:1c:77:06:90:1e:b2:70:9b:39:c8:82:d5:1c:
                    f2:5b:f3:69:bc:df:87:e0:67:13:ed:e3:a9:a4:c3:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154438

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:63:b5:7b:4c:71:f2:18:14:c2:20:4c:c3:86:8d:44:6e:de:
         18:7e:17:da:2f:23:13:ab:6d:82:a3:42:1d:0d:49:cb:2f:06:
         ec:71:20:2c:e4:7d:64:fc:a4:5b:bf:42:f4:6f:b3:e1:36:35:
         38:6f:4e:8a:24:46:04:0c:4e:18:12:d7:24:f9:bd:14:86:e2:
         95:67:c7:77:f3:2d:a2:ef:e0:5d:75:68:3f:a8:0b:c9:32:f4:
         05:f8:53:cc:db:94:8b:73:b3:99:09:7c:52:03:6c:18:e3:4d:
         14:27:6a:7d:bb:b0:c5:dc:2f:fc:0d:9f:fa:cf:8c:31:f8:80:
         6c:23:42:0e:3e:83:e5:9b:d7:93:16:15:7a:61:1b:32:6a:a7:
         20:6d:6b:75:05:a7:de:34:40:16:74:91:b7:44:e6:90:8a:d2:
         8c:e8:5d:13:4a:f8:a6:b0:29:58:f7:4e:3d:66:98:76:45:1f:
         40:fa:09:e8:2b:a7:8e:72:7e:ee:6c:dc:af:df:4e:15:37:08:
         fd:3d:b1:87:ab:16:94:72:79:76:af:7e:c9:9b:5b:55:1c:00:
         08:37:73:d5:0b:df:50:4c:9f:5d:d0:be:c5:67:b4:59:60:19:
         e3:33:1e:ad:f0:f7:51:fe:91:a7:c4:f8:af:38:f8:6a:a9:47:
         67:7e:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:40 2026 by rpki-client