Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
File:                     -D5VvcZ7iLBYj5Yplze0oce1u3o.cer (raw, json)
Hash identifier:          c4g3BB76FOQnr0N7RJOsB+57DIAcqSJW5ZgzB+nPOHc=
Subject key identifier:   F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BE5E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 19 Jun 2026 05:53:30 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:df7:22c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 09:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179806 (0x2be5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 05:53:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9134ACE, serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:97:c9:7d:09:2d:4b:46:22:b9:2b:91:10:
                    d0:37:fb:fb:b3:4b:7e:99:a1:9c:38:9e:e7:67:79:
                    6d:4d:fc:67:a0:1f:0f:db:96:33:e3:93:e6:1f:26:
                    a0:31:11:f9:9b:b7:7f:f4:9a:ae:4f:69:4a:37:57:
                    a9:f2:9a:9e:8b:41:f1:6c:ad:c3:2b:d0:e8:a0:90:
                    b2:57:ed:d5:e4:ee:d4:45:cc:df:f1:8d:bc:38:76:
                    57:4a:21:21:58:08:1a:81:27:26:05:47:49:c6:ce:
                    90:de:2c:24:91:cc:ca:6e:80:07:6f:e8:af:04:6d:
                    ca:b2:ab:c6:c0:02:18:94:43:60:b9:42:30:3b:36:
                    24:be:a7:5f:04:7b:f6:81:06:2c:c7:9a:07:99:3b:
                    7d:a8:a4:97:64:1a:54:14:6f:9e:41:93:e1:84:37:
                    31:4d:1b:45:54:cf:81:65:84:21:f6:1b:dc:56:70:
                    c2:e7:cc:d5:10:3f:39:98:a6:6d:ce:fc:a7:66:25:
                    de:b4:87:cb:93:f3:9c:26:49:6f:2b:3f:d2:3d:1d:
                    3e:64:a9:e7:c8:74:48:0d:17:b6:cd:8b:dc:b3:1b:
                    3b:40:3e:f9:e8:6d:f8:c2:ca:76:f8:ad:86:dd:b1:
                    d7:00:70:5f:b9:c4:cf:28:00:cb:64:03:c8:21:ca:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:22c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:d5:5f:1e:0e:dc:88:30:fb:b1:79:26:28:e3:62:cb:20:
         f4:a2:7a:eb:3f:7d:30:0f:ea:39:5b:95:df:f0:c0:fb:ba:93:
         e9:06:93:11:03:79:33:0d:ed:f2:34:ac:2f:0c:aa:d1:eb:6d:
         b4:fb:59:91:61:07:a2:bc:41:a2:a1:0d:fa:e6:4f:86:c2:b6:
         b8:9e:ce:89:2c:b0:ee:87:47:e0:65:0e:2b:95:e9:82:97:0a:
         b1:c7:10:9e:bb:c4:29:cc:ed:05:64:85:d6:d1:ce:68:c1:0c:
         09:7d:cb:6f:59:82:a3:36:34:33:02:4b:81:df:c6:12:25:3c:
         33:87:36:f5:9f:de:83:03:a8:75:2d:99:3e:be:fe:70:58:5a:
         d2:57:e8:ea:bb:69:9b:d8:0c:b6:95:1a:51:5e:91:af:63:8e:
         6c:1a:b7:d6:07:74:96:be:a6:c1:5e:e9:27:cd:f7:07:4c:bc:
         1c:4c:83:56:ff:b1:0c:14:56:94:86:6b:b9:80:80:21:c1:cb:
         f3:0a:31:1d:46:54:c6:75:0d:39:9e:0a:97:84:e3:4a:08:a1:
         52:33:6c:1d:1c:06:d0:40:2b:3c:b6:a7:15:2e:4d:d7:82:f2:
         57:c3:26:ae:62:52:bd:a3:31:67:85:8e:d8:d0:03:2b:b0:52:
         c7:82:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:06 2026 by rpki-client