Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7ptq0PluDx7PgGyKBgGgPrYMFs.cer
File:                     v7ptq0PluDx7PgGyKBgGgPrYMFs.cer (raw, json)
Hash identifier:          TDPGHceTT1WNCUg/Gj6ZCMv+ZabnSbQXYgsJjRkkjts=
Subject key identifier:   BF:BA:6D:AB:43:E5:B8:3C:7B:3E:01:B2:28:18:06:80:FA:D8:30:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029F6B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/v7ptq0PluDx7PgGyKBgGgPrYMFs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:10:59 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 142255
                          IP: 2001:df6:a940::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171883 (0x29f6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:10:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A913E42C, serialNumber=BFBA6DAB43E5B83C7B3E01B228180680FAD8305B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:b4:fd:9a:d8:bf:73:fe:07:07:d7:16:2c:
                    af:36:a7:fb:d3:f9:1a:ee:50:4b:51:89:6d:f8:99:
                    89:72:04:4d:66:6e:6e:a3:9d:a2:43:59:00:ea:90:
                    78:2c:0d:61:79:5f:73:f1:b6:fd:35:89:2b:7c:e5:
                    da:3c:cf:bb:29:9d:3d:8b:af:77:0b:fb:06:f1:4b:
                    56:cc:26:35:b9:db:00:c0:77:21:96:37:f8:b9:4e:
                    69:42:73:ac:89:73:65:0f:4d:90:f4:ac:fb:a4:5e:
                    fe:a3:3d:2d:15:fc:4d:f2:10:5b:f2:5d:f0:f4:38:
                    6b:a7:d8:49:cd:7c:e3:4b:95:fb:fa:33:e4:c7:9f:
                    3e:3c:93:96:89:25:c6:d4:94:bc:22:15:6e:0d:19:
                    21:d8:46:fa:5f:7c:52:20:19:b3:8e:19:90:c9:30:
                    99:06:bf:57:6e:13:ba:1e:13:b7:50:d1:fc:29:0f:
                    d9:65:a2:5c:38:e3:94:b6:8a:d3:1d:70:9a:a4:97:
                    6b:4c:e0:1d:b5:56:99:18:00:21:ac:22:de:14:24:
                    ab:43:0c:49:39:27:cc:77:17:86:e7:62:17:18:79:
                    7c:aa:7c:43:37:14:86:aa:72:ad:f2:9e:d8:b1:54:
                    29:ee:1a:49:0d:e1:d0:f4:d4:a0:92:9e:9d:0d:15:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:6D:AB:43:E5:B8:3C:7B:3E:01:B2:28:18:06:80:FA:D8:30:5B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/v7ptq0PluDx7PgGyKBgGgPrYMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142255

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:a940::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:87:04:1f:56:64:af:0e:bc:c4:37:dd:fa:c1:74:87:ee:1b:
         af:2a:64:6f:cb:98:08:d2:31:68:76:48:0f:97:6f:00:ff:ff:
         47:e0:f2:96:ed:72:57:85:16:3d:a5:3e:2b:73:94:ed:2b:6f:
         74:b5:71:0d:70:98:7d:f3:6c:18:e5:9d:34:e0:89:2b:77:20:
         00:74:a4:a2:6a:57:9c:30:81:d6:8d:e8:c2:cf:8f:71:92:7a:
         5a:d3:a0:f7:c9:c6:8a:c4:10:18:e1:cf:70:69:cc:f2:3a:f9:
         dd:87:5a:c2:30:ae:9c:47:4e:eb:92:0a:22:39:07:66:de:a8:
         fc:07:51:3c:87:7d:de:a2:40:f7:6e:55:c3:4c:43:f0:e8:86:
         64:f8:fe:22:d6:1b:ab:dd:34:25:53:c7:4b:2c:21:dc:2a:15:
         09:0b:e9:5c:22:1c:ae:2e:59:d4:aa:4b:39:37:89:a2:0c:06:
         06:d4:8f:fd:23:4f:63:58:64:0a:e8:66:87:f2:e8:58:ea:cd:
         a5:2f:ff:07:3d:92:cb:b8:53:a5:7a:38:fd:94:df:a7:c7:81:
         5b:49:fa:ce:c9:35:43:a2:7e:76:b9:09:e6:b6:e7:86:37:fc:
         fe:69:63:c6:05:ba:ff:61:90:72:9d:f8:4b:07:50:bc:5f:1d:
         1b:ae:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:23 2026 by rpki-client