Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer (raw, json)
Hash identifier:          GHQyltyNA558ivgb/bOgaaR1VBGgd0k4HzsTy31o0vQ=
Subject key identifier:   EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A759
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 Mar 2026 13:14:17 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 18233
                          AS: 132454
                          IP: 103.21.168.0/22
                          IP: 203.160.160.0/19
                          IP: 2400:8a80::/31
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173913 (0x2a759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 30 13:14:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:60:88:fe:2d:43:9e:7f:97:c1:f6:2a:bb:
                    a4:ff:11:76:67:15:e1:f0:36:a6:16:ad:63:27:6e:
                    7e:25:88:99:57:df:d5:1d:75:4d:c8:22:06:8c:21:
                    b0:75:40:75:32:76:d6:16:7f:a0:81:dd:c6:ba:09:
                    b7:67:ce:f3:77:a1:26:99:95:7b:e2:74:83:06:3a:
                    a3:88:35:9a:8c:6a:d9:e1:50:36:0e:82:e0:5a:0f:
                    19:fb:b3:b0:6c:58:9f:c2:d2:af:e7:75:29:84:c1:
                    f2:5b:a1:ec:8e:b6:a8:d0:cf:57:56:21:8a:2a:04:
                    d3:5e:f2:37:0d:dc:a2:8e:ac:46:41:e1:1b:35:4c:
                    62:c7:f4:86:84:c9:dd:1d:dd:c6:d0:e3:e3:c4:6c:
                    5a:b4:48:bd:a8:15:c5:b5:44:30:e2:23:85:3f:d7:
                    cd:cc:f1:cc:05:6b:7e:6d:c4:df:ac:89:32:4d:79:
                    cd:6b:a3:23:ae:57:00:85:67:e6:a2:75:e6:ae:c0:
                    34:60:42:95:65:9b:ca:bb:3f:0a:ad:64:8d:c5:57:
                    e9:bb:dd:9c:7e:fc:4b:ce:c1:d9:81:80:63:43:bc:
                    6b:e7:03:e6:98:c9:99:7f:62:ef:31:89:4a:2b:b1:
                    e6:b4:78:2d:58:98:4c:58:dc:b1:12:0c:f0:7f:36:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18233
                  132454

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.168.0/22
                  203.160.160.0/19
                IPv6:
                  2400:8a80::/31

    Signature Algorithm: sha256WithRSAEncryption
         52:66:8b:fd:a8:78:9f:be:5b:14:23:30:b1:db:66:d2:fe:9d:
         20:2b:0a:d4:e3:7b:7b:31:60:d7:00:07:09:33:8c:e4:6e:50:
         3c:ee:db:be:60:5a:a6:bf:34:42:2f:64:75:77:23:91:5c:13:
         02:17:e0:78:61:4f:3e:37:49:a2:34:b3:ca:89:1b:eb:f3:c4:
         d9:6b:ba:1f:8c:d2:91:4a:8a:ad:eb:94:80:2b:a4:c5:26:c9:
         7d:c9:ff:f1:7e:97:34:ac:6b:b6:55:18:48:0f:48:4a:71:a3:
         26:04:d1:bb:11:fb:a9:8d:fc:c1:b4:c3:86:c7:55:0a:61:dc:
         25:f7:ea:86:f4:f0:77:13:be:92:60:d8:e9:56:10:82:ff:43:
         43:58:36:24:84:10:1f:c5:8d:c1:e3:f3:97:71:65:41:ba:c6:
         f6:18:8f:2c:09:f2:4d:d2:76:ff:e0:2a:1a:eb:5b:dc:74:81:
         68:ad:bb:98:ca:15:e2:a4:2f:9d:be:fb:9b:56:93:7b:24:b4:
         69:5a:67:88:fa:ae:a8:3d:9f:e4:59:85:ee:5e:f9:99:c5:84:
         0a:5b:4c:1e:f5:67:35:26:1d:88:9d:30:1c:41:6b:eb:6d:e3:
         08:de:5e:0f:30:d8:33:cc:29:b6:0d:91:6c:1b:1a:56:b5:b3:
         6b:98:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:31:43 2026 by rpki-client