Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
File:                     1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer (raw, json)
Hash identifier:          36K1Ds8ok1TaMMo2RgVy7g7yibmWaCoWLcbPbiNvkFQ=
Subject key identifier:   D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C8D0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jul 2026 14:45:50 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 38310
                          IP: 122.200.16.0/21
                          IP: 2404:7300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182480 (0x2c8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 30 14:45:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:76:95:0f:d0:a2:30:d3:f7:c9:1b:12:f0:
                    36:42:33:29:fe:89:21:48:dd:a0:cf:90:a2:17:80:
                    51:a3:5c:4b:5a:21:30:be:9b:da:56:11:04:00:4e:
                    6e:8d:0c:0b:5a:13:6e:b0:6c:58:fd:d1:7b:86:f3:
                    d8:d2:d1:ea:79:c0:36:25:4a:ab:ae:ba:7e:97:d0:
                    3a:03:e7:d4:61:19:d3:9e:1a:af:6d:82:45:25:5c:
                    7a:ca:41:7b:17:1e:01:d6:77:0e:01:e0:d8:b8:fd:
                    30:8b:94:19:d5:55:62:f3:9f:17:25:1c:77:b2:e2:
                    24:12:a8:5b:f5:29:e6:4d:78:9d:0b:2c:b2:91:41:
                    24:9a:1f:fb:6c:0d:00:3c:94:0f:ee:2e:28:dc:d5:
                    5f:dd:99:92:19:c2:22:ff:58:45:ce:e0:1f:de:d0:
                    ed:67:be:f7:4a:92:c2:de:ef:a9:59:f5:ca:4c:2d:
                    c9:e6:9d:13:1b:99:0c:87:04:13:ce:3e:2f:bc:33:
                    fb:3c:ad:e0:84:6a:2b:e3:79:1f:ec:8e:e8:df:36:
                    9a:53:f6:46:81:c6:66:71:1d:e8:76:2b:70:2c:37:
                    3e:54:d9:00:fe:bc:6c:63:4f:1c:4c:da:07:5d:25:
                    c7:6d:69:bb:09:d6:57:0f:4b:d0:f2:b7:74:7b:48:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38310

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.16.0/21
                IPv6:
                  2404:7300::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:a1:f2:da:26:af:96:49:89:fd:3a:48:0a:f9:57:db:f2:
         43:df:14:b1:76:cd:01:6e:b0:7f:c2:bd:3e:26:68:c7:22:df:
         cd:44:ca:b1:91:72:82:9e:2e:15:bc:05:bc:05:75:af:d6:c4:
         d0:b2:23:7c:5a:98:d5:91:35:a2:a6:c6:f4:26:63:7c:52:3c:
         22:08:95:ed:92:d4:54:d5:62:06:ed:be:fb:60:f8:2b:12:cc:
         ae:d6:00:9e:aa:10:07:8c:8e:52:02:a9:33:84:93:4b:96:bf:
         fd:42:9c:78:4b:f5:e1:31:0d:d4:0a:f1:b4:ad:99:1b:18:6f:
         a4:3c:f8:2e:d2:56:26:5d:ff:88:14:01:79:b1:9d:5f:d5:82:
         13:56:0d:0b:79:04:cd:bc:ab:c6:2b:f4:37:9c:79:29:6d:39:
         ee:58:3a:31:74:61:4b:8b:c5:5f:c0:41:c4:89:3e:ca:07:c4:
         95:d4:a4:1d:cd:6d:55:20:c1:63:67:85:99:bd:2e:fb:d7:92:
         fe:0e:c6:23:12:c7:56:25:a1:ff:25:43:ce:42:20:4d:09:7d:
         14:2a:7c:53:25:02:62:c8:91:ee:d8:c9:42:a9:93:21:5e:e7:
         45:18:81:fe:81:15:18:f4:9c:67:07:a7:54:92:91:a7:c0:5e:
         c4:9c:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:46:35 2026 by rpki-client