Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06UO20LhYmfFVu4xl9edpaVxu4A.cer
File:                     06UO20LhYmfFVu4xl9edpaVxu4A.cer (raw, json)
Hash identifier:          Os84fTg8RCI5AT4+f64Tx7fUYro3xUq+eeWVzAvxj5A=
Subject key identifier:   D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B1EE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 04:51:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 152480
                          IP: 163.128.114.0/24
                          IP: 2001:df6:d9c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176622 (0x2b1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  4 04:51:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9112EF1, serialNumber=D3A50EDB42E16267C556EE3197D79DA5A571BB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:29:64:d7:aa:5d:40:62:84:77:5c:60:c0:
                    84:79:24:96:1a:5e:1c:aa:45:5e:f3:bc:38:e5:72:
                    ca:cf:c8:0b:f4:23:79:0b:b7:c4:fc:89:2b:b0:cd:
                    c5:38:e2:46:e2:6d:b4:ab:31:d0:52:46:c2:89:b4:
                    b2:7e:d4:28:4f:ab:13:0d:0d:11:43:7b:e8:61:44:
                    7c:0b:ce:ce:db:70:73:32:5d:61:32:d6:35:84:c5:
                    7f:7e:fa:89:1f:87:c2:6d:fd:46:6c:54:2f:5d:df:
                    42:17:e0:8e:6b:6d:2e:b3:0f:d0:19:9c:9f:15:8b:
                    cb:14:04:ac:99:9b:81:21:4f:71:7c:ff:52:5c:ef:
                    40:44:41:f1:0b:ad:a9:7a:4f:bf:0a:ff:84:73:9c:
                    1b:00:ba:28:62:b6:1e:dd:7f:0d:cc:4b:fc:5a:9f:
                    86:36:27:fc:7d:d8:b0:46:eb:0a:41:4a:ec:4f:ee:
                    22:3b:3c:ef:e6:cd:9d:68:39:e7:0b:54:9d:5d:7a:
                    85:c4:78:75:a6:f0:8b:d3:57:5e:8b:2b:30:3f:14:
                    c7:d9:42:62:c2:48:7c:7e:83:ed:1f:59:b4:a1:e3:
                    37:f4:4a:a0:a8:61:36:cb:1d:6b:d8:d3:fd:d5:d6:
                    55:91:46:44:3a:56:de:9d:b8:9b:8d:77:20:37:03:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152480

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.114.0/24
                IPv6:
                  2001:df6:d9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:74:e2:d0:f0:b2:b0:6e:88:0b:94:c9:d0:f3:8f:10:8c:0f:
         aa:c1:6d:10:d8:66:07:63:50:4b:b2:3c:85:d1:14:8a:82:64:
         a8:53:d7:73:5b:b5:9c:89:72:e4:1c:24:48:17:3c:46:30:1f:
         11:78:be:15:8b:3e:6b:2a:09:2d:39:16:52:ed:30:fd:9e:5b:
         e9:a9:84:23:4e:d6:b2:93:0e:21:f5:df:b4:a4:1e:ad:79:89:
         b6:6a:fa:f4:e1:0c:11:90:4f:5d:8e:17:d4:83:3f:22:20:f5:
         a8:a2:07:5b:01:7b:ac:2f:01:e7:a3:72:63:6b:c8:89:61:73:
         52:e6:c6:79:89:5b:91:dc:96:6b:14:eb:9c:62:fc:61:d1:e9:
         89:61:3e:f3:0c:f4:9c:43:40:67:85:ce:53:02:34:c5:c7:1b:
         1b:f8:37:ac:2b:39:25:f0:a9:fb:53:6b:2a:ec:68:1f:f1:50:
         54:1d:14:0b:26:71:d4:52:bf:ce:93:2c:44:b8:fc:da:ec:6f:
         dd:e2:c3:81:d3:91:d3:c4:d3:7d:c9:96:b4:5c:60:81:93:0a:
         e8:6b:f4:74:82:f2:53:1d:47:36:7d:ee:1b:11:c7:ba:02:fe:
         12:7b:7a:ca:e6:1f:7c:4d:e1:fb:56:28:f7:02:30:0b:ef:1f:
         1f:d5:d9:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:36 2026 by rpki-client