Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXBizuykqD8S6-i6FeanorMFL-o.cer
File:                     qXBizuykqD8S6-i6FeanorMFL-o.cer (raw, json)
Hash identifier:          SV5Z2fSq6UeAMNF080P3VSvxn1mCW1DB3NtxmGCdZY0=
Subject key identifier:   A9:70:62:CE:EC:A4:A8:3F:12:EB:E8:BA:15:E6:A7:A2:B3:05:2F:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BBF6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 08 Jun 2026 22:29:02 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    AS: 58681
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179190 (0x2bbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  8 22:29:02 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A91799DA, serialNumber=A97062CEECA4A83F12EBE8BA15E6A7A2B3052FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:39:56:eb:cc:a0:c0:34:ed:c8:10:af:ed:
                    86:08:d6:03:47:b4:3f:87:b6:e0:61:77:5e:72:2d:
                    d3:07:c0:eb:96:e0:9b:9d:4f:51:7e:05:12:25:37:
                    49:01:a7:92:e9:52:df:6c:b3:7f:e9:ee:36:37:39:
                    ff:01:05:37:11:95:a2:ba:95:e3:9b:91:f6:fa:4d:
                    c5:5c:9c:b6:9d:dc:0e:6e:64:bc:0b:c7:ba:e9:8d:
                    f1:ce:e9:77:6c:aa:5a:35:48:16:f1:06:52:09:45:
                    df:f2:07:42:f7:5e:a8:62:c7:6c:b2:bf:08:7e:36:
                    9e:47:8a:f9:1e:98:fb:ab:32:ea:d9:6c:14:82:26:
                    1c:52:dc:37:94:78:6d:07:52:09:be:f6:98:ca:4a:
                    b1:fa:bd:9f:17:44:1d:47:5a:6e:61:c8:ae:03:76:
                    e0:c8:8f:84:76:2f:60:2c:cc:b7:ed:0c:99:72:f5:
                    25:f0:64:50:39:ff:b0:dc:6f:51:51:b0:a7:46:da:
                    8f:b8:b6:04:32:71:18:13:1c:e7:d4:98:07:ad:dc:
                    fa:ed:4b:30:7b:83:3d:00:22:7f:4f:7f:f0:38:23:
                    ff:de:bb:c6:b4:01:8b:a8:80:86:6b:73:cb:f5:b5:
                    83:6d:20:8f:b0:73:38:25:67:92:9e:fc:4d:25:e5:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:62:CE:EC:A4:A8:3F:12:EB:E8:BA:15:E6:A7:A2:B3:05:2F:EA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58681

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:27:27:a9:47:1a:54:7d:61:a9:9b:ed:29:98:a5:4c:b6:
         26:75:d0:ab:ac:66:3c:a7:ea:a3:5e:c9:80:79:c1:ba:18:ca:
         11:4e:43:0f:fe:2f:b9:70:03:11:61:e9:c7:8e:cd:1d:8c:2d:
         00:0d:d3:35:20:92:79:e9:ab:f1:75:13:47:e2:a5:2f:db:b7:
         96:41:7c:e7:4e:b9:7c:17:12:f2:d9:e8:28:4c:0e:0c:dd:c0:
         f5:81:fb:36:ae:11:c3:e3:8d:37:bc:6c:ab:4f:f7:f3:53:6b:
         6d:2f:45:9f:1e:ff:29:c8:a4:80:68:a2:ac:45:99:7c:c2:03:
         26:b5:2a:99:36:53:b7:6d:ed:2c:a7:42:28:eb:c9:c6:46:0c:
         1b:2f:ea:cf:61:16:c3:ca:96:38:71:35:ce:d3:53:99:ce:67:
         11:72:d3:0e:68:3b:d0:be:52:b8:96:6e:31:52:f5:52:9c:6d:
         a9:74:9c:01:11:21:29:d9:bd:01:0d:47:9d:f4:84:a5:97:a7:
         ec:19:5b:e9:5e:96:ac:7a:bf:93:a2:c9:d2:78:81:2b:ac:c7:
         0c:65:7c:b8:47:63:dc:47:03:29:30:05:f2:81:5a:3b:06:d7:
         51:16:97:bf:2d:bd:69:5e:8d:9b:f3:60:e1:78:55:15:8f:3c:
         5d:3c:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:26 2026 by rpki-client