Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
File:                     h57Jr836J6POe11DeHoviQOFWG4.cer (raw, json)
Hash identifier:          BH4H4HuSI+8Yq1cT8LCr1lXSszhmzDn9mr+Q7OdT3qI=
Subject key identifier:   87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AAA1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 Apr 2026 13:03:10 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 24572
                          IP: 45.117.16.0/22
                          IP: 103.2.72.0/22
                          IP: 114.110.48.0/20
                          IP: 114.111.64.0/18
                          IP: 124.83.128.0/17
                          IP: 183.79.0.0/16
                          IP: 2001:df0:15::/48
                          IP: 2400:7e00::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174753 (0x2aaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  7 13:03:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:3e:18:4c:b4:2f:e0:b2:ff:20:98:39:cc:
                    90:7f:92:64:28:83:9b:e3:92:ce:a3:53:ff:e7:79:
                    29:df:93:e7:42:3f:05:2d:cd:72:1b:70:62:72:20:
                    15:51:2b:a5:13:3c:f6:fe:16:f4:be:a6:a9:c6:76:
                    b0:af:4a:90:56:19:65:36:c2:95:50:54:0e:a7:6a:
                    c5:a7:41:05:7a:a6:5d:aa:46:ec:bd:e0:78:45:43:
                    95:ee:75:a5:44:bb:75:db:99:2b:c0:f4:52:c4:78:
                    16:a5:ba:7f:29:b9:83:5f:eb:96:00:3f:7c:99:08:
                    56:c7:d0:c8:cc:b1:6b:58:5a:b3:2e:dc:00:4c:5c:
                    87:30:53:8c:f8:e4:1a:fb:ab:f0:ea:23:65:e5:ad:
                    2e:c9:ca:7d:ce:84:8d:e6:d7:bf:a4:4f:03:3c:1f:
                    8a:49:96:93:17:c2:c2:47:e9:a2:a7:8a:9d:5e:5c:
                    a1:b9:68:7f:41:bf:7f:ac:86:8e:22:b7:dc:c3:c0:
                    6b:92:e8:c8:bd:43:2d:6b:a3:7c:08:e3:7a:ba:96:
                    07:82:a9:93:d1:dd:54:6a:5a:8a:fc:24:69:01:da:
                    b8:a9:51:8a:3c:31:e3:f7:81:29:a8:78:e1:91:e3:
                    a6:2d:46:d2:42:8e:16:9a:bc:26:07:55:67:57:b8:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24572

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.16.0/22
                  103.2.72.0/22
                  114.110.48.0/20
                  114.111.64.0/18
                  124.83.128.0/17
                  183.79.0.0/16
                IPv6:
                  2001:df0:15::/48
                  2400:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:b6:fb:e5:8a:4a:ac:d9:39:7d:ee:1f:d1:a0:94:a5:28:
         6c:0a:25:94:1e:67:92:6d:1d:84:3a:b1:11:eb:d7:f4:a7:ee:
         79:d1:c7:3f:9f:9f:fe:0c:a5:83:ec:db:db:c3:b8:e1:96:e7:
         bf:d0:cf:41:ca:5d:70:1e:03:8a:47:41:26:cd:36:8f:0a:fe:
         7e:76:aa:9b:66:08:b2:b0:e3:6a:fc:c0:4e:1b:2d:22:5c:5e:
         cd:8b:46:e3:98:3e:21:6c:43:7a:13:5a:29:3d:2a:fe:a1:d5:
         4f:9d:f9:49:33:92:9b:d8:37:df:00:59:ce:ee:88:59:8f:f3:
         5f:9c:19:01:dc:b1:25:72:7a:c7:95:c9:47:13:b0:5a:c6:14:
         fd:17:55:4f:37:ba:80:c2:d1:57:41:c5:92:18:72:64:f1:1b:
         69:77:20:fb:59:4b:dc:c2:7b:ea:9e:5f:0f:dd:91:c3:42:1f:
         74:6a:d1:6c:39:f4:73:d7:08:6e:c2:c8:3c:68:f9:b2:26:73:
         15:41:fd:89:85:05:1b:b0:ef:f3:bb:12:94:fd:bb:60:e0:88:
         3b:eb:5f:8c:7f:d5:ec:f9:c8:a6:ae:27:35:65:10:23:3f:95:
         03:ad:95:60:27:39:c1:25:bf:02:09:bd:f3:a7:f0:ea:06:69:
         46:39:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:10 2026 by rpki-client