Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
File:                     pNgA2xjHwseXEbNfyLfSF9x9TG4.cer (raw, json)
Hash identifier:          PUlkiLKaccv/s+9/ncvbTje/3W+Yk1J9xnT2FvJRKnA=
Subject key identifier:   A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D053
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Aug 2026 08:25:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 4784
                          AS: 154562
                          IP: 163.61.161.128/26
                          IP: 163.128.98.0/23
                          IP: 2001:de8:a000::/48
                          IP: 2402:5260::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184403 (0x2d053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 27 08:25:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:df:fe:a5:d8:57:fa:9c:4a:73:4e:5f:cb:
                    dc:c5:90:4a:9a:46:c9:b0:a1:8f:42:f1:8f:23:dd:
                    05:42:d9:51:3e:9e:ed:e9:2d:59:0a:ad:52:bc:15:
                    5c:47:3d:74:f5:67:c0:5a:d6:e6:b1:24:c7:22:c7:
                    eb:5b:d9:52:7a:5b:19:a8:cb:7b:46:94:50:ee:f7:
                    fe:e0:61:c6:68:40:f5:28:c2:a5:25:3a:6c:01:ca:
                    8d:1b:c5:63:0c:e2:34:5f:f4:8e:a0:de:ec:eb:7f:
                    ca:77:2e:b9:6e:49:96:20:18:70:0e:c4:d2:62:49:
                    1b:18:13:f4:69:ef:99:fe:13:0a:ba:7a:16:9f:de:
                    92:7b:cd:66:08:cc:71:39:aa:dc:f8:4c:3f:79:4e:
                    aa:3a:59:c0:20:94:ef:ac:63:a4:cf:48:f7:6a:fe:
                    ce:77:ab:47:2e:8d:86:78:2f:f7:72:54:89:40:34:
                    0b:be:fd:14:da:1b:a6:f5:b5:bb:94:e8:e9:2e:97:
                    4b:fb:24:85:07:55:27:5c:c7:ab:2f:20:86:f8:fd:
                    2c:d0:92:79:69:3e:a2:5c:14:0b:6d:33:cb:03:d0:
                    bb:0d:90:f1:d6:2b:52:b8:4e:5b:62:d8:dc:bc:dd:
                    b0:91:83:45:e4:6c:46:94:85:8b:17:26:2c:5e:04:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4784
                  154562

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.161.128/26
                  163.128.98.0/23
                IPv6:
                  2001:de8:a000::/48
                  2402:5260::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:46:1b:45:6b:b7:62:85:4a:c9:37:53:5e:8c:5b:85:40:d7:
         06:e9:b3:ee:4d:32:4f:c3:4e:ec:f4:45:ed:d1:aa:ff:3a:61:
         ae:61:49:a9:16:0b:f3:79:c3:78:fd:ac:6f:f0:69:bb:0d:ea:
         d8:82:a4:69:e8:51:91:4c:2c:3b:e3:3e:51:9a:46:8b:23:63:
         e1:f8:26:ea:a4:a4:02:3d:4c:2d:50:af:1b:67:a7:68:55:82:
         b3:54:bf:31:de:df:e6:a8:27:04:da:46:3f:a8:db:89:f8:a9:
         2a:ea:2e:5f:39:c3:9a:93:c0:97:02:74:e3:b2:98:0c:0d:0d:
         e2:6f:7a:33:de:47:05:5f:b7:34:a5:0e:47:9b:51:30:ea:f6:
         4c:64:3c:8e:fb:d4:f0:8b:d6:33:a6:aa:a6:a3:a1:f5:ee:e0:
         0d:6f:f6:84:75:9b:91:fc:76:e1:64:3f:4a:a7:d5:01:84:2f:
         a6:76:fd:ae:57:8e:fa:2e:2f:3c:2e:5d:b0:d8:27:d9:4e:94:
         fa:47:56:dc:b5:79:ba:c1:f8:b7:e0:1a:1c:53:f7:89:48:c8:
         54:db:60:c8:d3:80:fe:51:e7:61:fd:3f:26:03:38:f1:8e:1d:
         cc:69:31:eb:b5:37:aa:49:6c:1c:95:96:98:d0:cb:c6:19:fd:
         63:b9:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:11:26 2026 by rpki-client