Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
File:                     wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer (raw, json)
Hash identifier:          0F2w7RfpDxZxYkOwTT5TNGr1pUk9K9XmsnHJXfmG6aM=
Subject key identifier:   C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BC04
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 04:48:29 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 154705
                          IP: 2402:62a0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179204 (0x2bc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  9 04:48:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91F146E, serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:08:5a:68:74:f8:5e:a8:01:53:8d:32:40:
                    e0:7b:c0:b0:e9:c1:f8:a7:e5:6b:b8:a5:0d:76:a4:
                    91:6d:23:ca:3c:a0:0d:1d:c6:19:a6:12:f9:ae:08:
                    02:92:16:e2:fe:61:6a:24:d3:8b:ec:a5:c1:73:17:
                    3c:83:e3:3c:53:fc:b4:8b:62:43:db:81:76:50:e7:
                    9f:6f:33:33:64:a9:38:72:02:03:70:ae:17:9c:25:
                    dc:3e:47:71:c6:f3:e3:11:38:86:26:0d:51:69:ef:
                    5e:a2:e1:62:1a:01:e7:c7:7e:6f:fb:5c:7d:de:ef:
                    f1:d0:22:82:14:7f:82:54:84:85:6e:6d:ac:ad:3c:
                    66:71:48:87:03:b3:4c:bb:4e:a1:4e:6f:d7:5c:f6:
                    c2:54:6c:da:9b:ce:d4:72:68:bf:86:9a:e5:de:8d:
                    26:0f:72:97:6a:78:48:57:66:5c:9e:85:a4:86:64:
                    f3:ae:55:2c:e0:c2:4a:23:e5:0e:21:a1:77:7a:7c:
                    92:cf:92:22:94:64:11:98:18:64:a1:1b:b6:c6:46:
                    f5:04:d6:8c:58:61:f7:d7:c5:19:5a:8f:bb:05:e2:
                    a4:cc:64:74:d7:a0:e0:b2:67:b9:50:0d:53:20:d2:
                    ea:29:88:f0:bd:32:67:d6:c5:fd:9f:3a:4b:3c:fa:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154705

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:b3:9a:ac:6e:d3:02:73:fb:25:52:d2:49:7d:86:58:6d:
         c5:99:bd:06:51:97:c8:fc:de:3c:e9:37:08:fe:7c:03:8b:2e:
         5a:6b:77:39:71:9a:cd:a8:63:44:08:35:c1:99:8b:a1:f7:d9:
         8a:a9:8c:7b:6f:be:88:6d:e9:50:f5:8c:af:77:e7:de:a4:ef:
         b2:d7:46:3a:f7:06:3a:b6:3d:b7:83:18:5f:64:f6:02:73:1b:
         5b:0a:db:cf:66:99:9a:29:b7:f1:62:7f:0d:11:5d:39:44:9e:
         f5:12:62:9c:66:eb:10:36:bf:9e:47:76:08:2a:b6:09:5d:b9:
         39:83:ec:e6:13:e5:3c:22:d6:fb:d7:b8:ec:ee:2c:07:dd:28:
         11:21:2f:ce:f7:86:b4:0f:fe:87:16:be:f9:ca:f1:04:c2:86:
         53:16:df:41:3c:70:5d:06:54:c2:a7:72:43:ea:d5:dd:89:d5:
         55:9e:7e:23:3c:58:73:dd:d7:09:ca:38:fc:d2:5c:ea:3b:b9:
         43:f1:9a:42:80:62:24:07:a9:e8:f9:e6:b4:cb:74:3c:1a:3f:
         f9:39:ea:13:aa:06:d4:67:46:95:89:55:ea:eb:98:e2:e5:57:
         5e:95:e8:97:1e:e3:3b:64:62:41:4f:b8:73:b4:dc:41:5f:9e:
         b8:18:70:97
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDArwEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwOTA0NDgyOVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjE0NkUxMTAvBgNVBAUTKEMxOTkyNDU1NUI3MTlBOERDRTVGODgx
RjEwQUNEQzBBMzVCMjA1MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0DwhaaHT4XqgBU40yQOB7wLDpwfin5Wu4pQ12pJFtI8o8oA0dxhmmEvmuCAKS
FuL+YWok04vspcFzFzyD4zxT/LSLYkPbgXZQ559vMzNkqThyAgNwrhecJdw+R3HG
8+MROIYmDVFp716i4WIaAefHfm/7XH3e7/HQIoIUf4JUhIVubaytPGZxSIcDs0y7
TqFOb9dc9sJUbNqbztRyaL+GmuXejSYPcpdqeEhXZlyehaSGZPOuVSzgwkoj5Q4h
oXd6fJLPkiKUZBGYGGShG7bGRvUE1oxYYffXxRlaj7sF4qTMZHTXoOCyZ7lQDVMg
0uopiPC9MmfWxf2fOks8+luFAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUwZkkVVtx
mo3OX4gfEKzcCjWyBSwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYxNDZFLzczNDgyNEVDNjNCRTExRjE5OEUzMzAwMjdDNDdBODg4LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMTQ2RS83MzQ4MjRFQzYzQkUxMUYxOThFMzMwMDI3QzQ3QTg4OC93WmtrVlZ0
eG1vM09YNGdmRUt6Y0NqV3lCU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlxRMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJioDANBgkq
hkiG9w0BAQsFAAOCAQEAOwazmqxu0wJz+yVS0kl9hlhtxZm9BlGXyPzePOk3CP58
A4suWmt3OXGazahjRAg1wZmLoffZiqmMe2++iG3pUPWMr3fn3qTvstdGOvcGOrY9
t4MYX2T2AnMbWwrbz2aZmim38WJ/DRFdOUSe9RJinGbrEDa/nkd2CCq2CV25OYPs
5hPlPCLW+9e47O4sB90oESEvzveGtA/+hxa++crxBMKGUxbfQTxwXQZUwqdyQ+rV
3YnVVZ5+IzxYc93XCco4/NJc6ju5Q/GaQoBiJAep6PnmtMt0PBo/+TnqE6oG1GdG
lYlV6uuY4uVXXpXolx7jO2RiQU+4c7TcQV+euBhwlw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:47:50 2026 by rpki-client