Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
File:                     ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer (raw, json)
Hash identifier:          6KJBfzdSs0HStvr8VARiz7le+oe5fMiIT/B2v7qIewA=
Subject key identifier:   79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D0D4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Aug 2026 13:27:57 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 18234
                          IP: 202.56.60.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184532 (0x2d0d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 28 13:27:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:61:eb:f5:b0:41:07:1f:c0:d5:8a:f0:79:
                    87:64:d9:e0:35:c5:62:f8:8b:21:3a:e1:08:19:4f:
                    39:09:fe:40:22:a7:29:39:87:89:3b:b5:ca:5c:e6:
                    86:fc:bf:9e:60:f4:19:ad:7b:59:8e:67:2b:e2:8c:
                    ec:92:f5:ed:83:c5:e6:ec:0a:d3:9a:49:b8:dd:3a:
                    a4:e0:ae:00:6a:92:fa:0a:94:6b:ed:86:65:e6:9e:
                    df:07:ec:e6:c4:9b:0e:82:96:d6:e6:85:b0:c1:6b:
                    cf:de:5b:62:8d:cd:2c:74:43:2b:42:b3:86:b0:69:
                    99:5a:a9:f8:15:af:20:ab:e4:e7:7d:ee:ac:0e:22:
                    17:62:c9:26:35:71:18:7c:62:7d:cd:9d:7e:9b:6a:
                    85:5d:a3:10:57:07:ed:2f:c3:18:b6:2d:c7:e0:89:
                    5c:f5:00:6b:16:bc:65:de:0b:b6:59:51:a2:b4:70:
                    4a:e6:7f:69:2b:ba:dc:89:68:cd:22:85:a1:2b:f0:
                    b2:d7:45:af:e5:11:9b:1d:bd:16:ee:91:8c:f8:d0:
                    d4:17:67:b0:4d:fc:32:46:a9:69:3a:cd:4d:5a:d9:
                    9e:d8:d8:8c:5e:9a:f6:54:52:f5:30:b6:04:70:e6:
                    07:e5:a8:61:d1:91:62:ca:85:80:19:d3:fb:53:1d:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18234

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.56.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:6d:41:cc:ce:0a:fd:46:5d:19:d1:19:dd:a0:c8:ed:27:
         53:fd:2c:b6:86:31:93:07:ff:88:a1:91:8d:40:2e:f2:b1:66:
         9e:d5:d7:10:e1:0a:a7:4d:fc:4c:37:57:b4:86:d4:a6:f3:1b:
         98:10:38:6a:66:7c:ea:5f:63:46:0e:cb:73:af:13:51:63:a8:
         af:fd:a7:39:72:d5:3b:58:12:1c:bc:03:9b:ab:cf:21:a3:b2:
         5a:b2:5b:5c:22:c3:21:9a:b8:40:17:e8:8e:35:a6:14:44:8d:
         c3:58:3d:d9:53:ff:98:29:13:d4:6b:c2:d8:33:56:a1:e1:e9:
         f3:a2:15:38:d2:4b:97:dd:07:56:50:c0:41:a8:65:ef:b7:91:
         e7:f1:b1:bd:49:36:b6:bc:89:b0:64:b8:d7:08:f0:60:08:cc:
         2f:bd:1f:65:c7:10:16:f7:eb:2f:90:e5:c9:4f:cf:05:1e:c0:
         91:6c:f3:5a:c8:9b:83:45:74:13:63:08:40:9a:65:8d:60:78:
         e5:66:e8:26:df:4f:b1:a3:dd:91:27:22:e8:72:9d:1c:c9:6d:
         f8:64:8c:57:64:7f:1e:fa:bc:4f:ed:61:d7:50:4a:ed:0f:87:
         fb:6e:7b:d3:07:3a:f2:d3:5a:ae:3c:4e:c4:40:0a:d5:6b:19:
         c9:9b:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:07:08 2026 by rpki-client