Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
File:                     qtP-OSFFYMILVrZr17neXikZTf4.cer (raw, json)
Hash identifier:          8f3oJrFt7UQFy/axYjh/Fcq3F0Pam1ep08tPZBxot9o=
Subject key identifier:   AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AC25
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 13 Apr 2026 01:37:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 154611
                          IP: 163.128.210.0/23
                          IP: 2001:df6:ea40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175141 (0x2ac25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 13 01:37:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A915273A, serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:5f:3c:76:7f:41:3c:10:d5:9b:c3:03:d3:
                    e4:ae:d7:5a:3e:aa:fe:b8:c9:90:aa:7d:0b:46:59:
                    e6:49:0c:d8:51:90:81:60:4b:1d:45:59:84:7e:d2:
                    40:1b:f2:03:74:9b:af:35:0b:ed:31:81:2f:35:0e:
                    83:30:40:ce:3e:d6:29:8f:34:3d:95:a0:37:96:d2:
                    cc:f7:1d:d0:5b:39:22:70:d4:2d:66:db:e0:35:09:
                    7c:92:10:d7:07:cf:a1:f2:61:da:e3:e9:b8:7b:8a:
                    13:1e:db:68:61:ca:7b:40:1e:ac:17:e7:6e:2e:b5:
                    a5:22:e6:04:46:b5:dd:0c:95:e8:83:9c:1f:b6:25:
                    db:56:9b:96:59:15:4e:8b:18:b6:48:58:29:d2:6e:
                    0d:72:8c:3e:b0:91:8a:09:35:e1:32:18:d5:86:9d:
                    19:d9:00:89:be:e5:de:a7:39:80:e7:e2:75:13:15:
                    2a:c3:e6:5f:ab:27:21:65:e0:ca:85:99:64:a4:ad:
                    2d:38:dc:56:29:bc:a3:57:31:0f:84:2b:82:92:68:
                    d1:a5:a3:5c:01:b6:0c:2f:9d:7f:fb:0a:a2:27:70:
                    19:8d:0d:6b:80:c7:e2:b5:43:67:6f:5d:e4:6f:2f:
                    ed:26:56:71:99:c7:cc:65:10:4a:11:00:46:43:13:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154611

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.210.0/23
                IPv6:
                  2001:df6:ea40::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:0b:37:da:f0:97:61:b3:f3:35:25:c4:65:d9:82:8e:b0:c1:
         32:50:a2:c3:38:0f:c4:f3:ae:53:82:02:0f:cd:28:47:df:49:
         ab:60:e1:6f:35:b5:02:1f:dd:7b:7e:e5:44:5b:35:29:12:df:
         04:9b:7a:96:59:bf:01:30:ba:b1:81:4f:7a:f0:18:18:59:ff:
         a3:0f:57:9e:36:b4:8b:e2:75:77:46:f9:3c:b2:34:e1:1c:82:
         f4:8a:8c:94:78:08:82:76:e5:2b:2b:40:8e:84:97:3c:31:be:
         6d:59:f6:65:fb:37:14:1a:7d:7b:1c:49:18:08:5f:ef:e9:a9:
         45:28:00:61:31:3f:a6:fa:82:48:34:fb:df:3e:e3:2b:c6:fa:
         e4:92:b2:9e:ec:5c:ac:8c:99:78:91:95:f4:78:a8:db:54:e3:
         e3:4c:04:ef:e0:ec:41:7e:ac:37:e6:94:67:70:7e:b8:6e:42:
         6b:c4:7a:35:c5:ca:82:26:c3:b8:5d:1a:b0:40:c2:c6:ca:e0:
         54:8b:aa:82:46:95:9a:eb:a0:32:c4:48:28:46:ad:12:bc:29:
         20:05:4b:b9:c3:94:ee:c2:d3:5a:92:fd:e0:5b:62:54:a6:4c:
         4e:d1:99:72:6b:47:52:87:b3:50:7c:96:43:db:a5:77:22:6c:
         d1:c4:0c:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:36 2026 by rpki-client