Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
File:                     hpeZugq_YN3ywa2PwMH2YASWqRY.cer (raw, json)
Hash identifier:          ujW8zLyFF2wdmADnZuUUCPjuCI/sELtjYbK0VMXJWR8=
Subject key identifier:   86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A10F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Mar 2026 03:24:20 +0000
Certificate not after:    Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 55493
                          IP: 202.128.106.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172303 (0x2a10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  2 03:24:20 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:fb:f4:f5:0d:b3:4b:ed:4d:b6:86:cc:0a:
                    4d:dd:af:2b:7b:78:24:84:a2:f0:64:37:cf:f1:c5:
                    02:3a:0f:82:55:c9:43:a3:c4:d9:52:4e:cd:fe:a4:
                    57:8a:62:bf:a8:3c:a6:ad:57:65:7a:84:f0:73:67:
                    bf:15:01:09:c3:7a:69:4d:6f:ce:0e:bf:c4:62:81:
                    78:d6:bb:61:18:85:e5:d8:18:e4:14:27:1e:87:6e:
                    0f:f4:7a:d2:cd:a6:f6:b3:e3:d7:e6:bd:70:94:57:
                    74:74:da:a9:f0:5f:f4:92:f4:85:9d:1f:35:ff:6d:
                    e7:18:5a:2f:04:f3:3f:7f:cf:96:76:66:a4:7a:dd:
                    94:27:d2:69:4a:f7:09:b7:20:b4:2d:d7:f2:33:11:
                    ad:77:03:e9:6e:da:e0:16:89:70:88:4e:82:11:38:
                    c0:39:f3:ed:9a:cf:14:dc:54:75:0d:c3:bd:bd:3b:
                    c0:9b:33:ef:65:b2:3d:41:86:7e:41:fc:38:27:f0:
                    75:fb:02:6b:a6:13:a2:a8:f1:ad:8b:bf:65:d1:f5:
                    fb:a5:36:19:0c:9d:d1:85:12:2d:a0:2e:60:c1:1b:
                    59:a2:66:11:ce:cc:4a:ed:69:a2:05:e7:7d:ab:cf:
                    51:f9:e3:97:7c:2a:da:38:66:93:e5:29:b7:27:a2:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55493

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:b5:0b:9a:04:dc:1a:5a:d5:61:d9:b5:75:ef:4c:83:a2:15:
         f6:2d:52:07:99:82:7b:f0:95:61:78:2e:a1:7e:25:f7:e5:cd:
         44:b4:22:90:7a:af:e1:26:a3:52:71:7b:fa:fc:e0:dc:a8:a9:
         e3:09:c0:a1:22:72:03:8d:b7:97:2e:82:1c:cd:8b:0c:28:24:
         a9:5f:ff:d2:bb:c7:e8:9e:f0:50:46:ef:22:49:da:10:42:20:
         35:44:32:73:3c:ae:20:2b:a3:7c:c8:86:12:a9:33:a3:c6:be:
         ef:1c:9f:62:ac:8c:65:6c:d0:4a:23:8c:fa:8e:46:0a:7f:26:
         28:a1:4d:26:7e:09:15:3b:92:20:f2:f3:84:0b:4b:d0:d3:8f:
         1c:b5:77:68:11:ce:a0:fb:a0:98:1f:50:57:72:95:dd:cf:b4:
         d5:1d:f2:26:b8:58:78:67:8f:c9:59:19:5f:cc:10:15:69:62:
         e6:8b:e3:cf:90:6e:a9:74:03:09:7d:5c:94:78:d6:d6:36:86:
         ab:30:ca:43:ae:ce:5e:3a:4d:48:08:53:e3:34:e2:b3:06:c1:
         25:1a:37:47:e5:40:f0:17:21:ff:5d:e7:a8:51:20:15:05:41:
         e4:72:87:f0:44:75:d3:8e:74:2e:f5:68:0b:96:8e:ed:bb:f5:
         9f:c7:89:68
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAqEPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMjAzMjQyMFoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzk3MkMxMTAvBgNVBAUTKDg2OTc5OUJBMEFCRjYwRERGMkMxQUQ4
RkMwQzFGNjYwMDQ5NkE5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeXfv09Q2zS+1NtobMCk3dryt7eCSEovBkN8/xxQI6D4JVyUOjxNlSTs3+pFeK
Yr+oPKatV2V6hPBzZ78VAQnDemlNb84Ov8RigXjWu2EYheXYGOQUJx6Hbg/0etLN
pvaz49fmvXCUV3R02qnwX/SS9IWdHzX/becYWi8E8z9/z5Z2ZqR63ZQn0mlK9wm3
ILQt1/IzEa13A+lu2uAWiXCIToIROMA58+2azxTcVHUNw729O8CbM+9lsj1Bhn5B
/Dgn8HX7AmumE6Ko8a2Lv2XR9fulNhkMndGFEi2gLmDBG1miZhHOzErtaaIF532r
z1H545d8Kto4ZpPlKbcnolkzAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUhpeZugq/
YN3ywa2PwMH2YASWqRYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc5NzJDLzRBQjRDOTQyMTVFNzExRjFCQTRCQjlERjFEM0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3OTcyQy80QUI0Qzk0MjE1RTcxMUYxQkE0QkI5REYxRDNEOEM2Ny9ocGVadWdx
X1lOM3l3YTJQd01IMllBU1dxUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANjFMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyoBqMA0GCSqG
SIb3DQEBCwUAA4IBAQDHtQuaBNwaWtVh2bV170yDohX2LVIHmYJ78JVheC6hfiX3
5c1EtCKQeq/hJqNScXv6/ODcqKnjCcChInIDjbeXLoIczYsMKCSpX//Su8fonvBQ
Ru8iSdoQQiA1RDJzPK4gK6N8yIYSqTOjxr7vHJ9irIxlbNBKI4z6jkYKfyYooU0m
fgkVO5Ig8vOEC0vQ048ctXdoEc6g+6CYH1BXcpXdz7TVHfImuFh4Z4/JWRlfzBAV
aWLmi+PPkG6pdAMJfVyUeNbWNoarMMpDrs5eOk1ICFPjNOKzBsElGjdH5UDwFyH/
XeeoUSAVBUHkcofwRHXTjnQu9WgLlo7tu/Wfx4lo
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:24:40 2026 by rpki-client