Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
File:                     5Ux-FlPQE0JCIsO5NoohO6URXOM.cer (raw, json)
Hash identifier:          kZaDhHj+PA3pCc6e59HASw8uxyawAJCqCJznu0iz+Mk=
Subject key identifier:   E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C3D5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Jul 2026 13:51:40 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 153995
                          IP: 2402:1260::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181205 (0x2c3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  8 13:51:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:c0:42:a0:2c:da:28:b5:a8:2b:b5:92:d0:
                    d2:5c:d1:ee:49:37:90:d7:0e:b6:17:fe:9e:cd:60:
                    2e:23:5e:f9:c9:4c:ba:62:e6:b9:c7:dd:43:9f:df:
                    3e:3c:ca:1e:f7:8d:f1:49:63:3d:00:89:24:d2:a4:
                    dc:97:74:88:34:9a:58:4b:79:0d:53:ab:7a:5f:e6:
                    36:b3:59:b8:19:59:24:8c:c1:78:58:8d:9f:98:dc:
                    24:3c:5a:d4:33:45:77:d5:fc:c8:f8:c9:ab:0a:7c:
                    7e:ac:28:ad:d6:15:b2:fc:da:22:27:ae:bd:fc:0a:
                    05:2a:6d:1f:9a:78:ca:d2:30:05:ec:9a:ea:1c:4b:
                    7b:31:50:1f:08:d9:05:5d:6c:14:cf:20:3d:7b:66:
                    bc:4c:0c:7a:87:72:cd:2b:c5:04:2d:9b:f5:21:d0:
                    92:23:a5:de:4d:72:59:19:73:6b:8d:d7:10:cf:fd:
                    30:3a:6a:b2:90:30:8b:fa:e8:7f:80:ee:d9:e5:9b:
                    a0:7c:57:01:3a:c5:23:69:e2:5f:f7:ad:fc:40:71:
                    05:8e:72:b1:c0:71:79:f6:1d:4e:e5:9e:8b:24:24:
                    54:69:34:74:34:db:20:33:40:d8:48:4a:4f:96:46:
                    a4:40:1d:ea:1c:f9:d7:74:f0:36:02:f2:0d:67:4f:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153995

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1260::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:93:62:9b:25:81:a3:4c:c0:44:4d:d8:61:d9:c8:ec:1e:
         1b:35:e2:37:99:42:dd:23:ec:a2:a8:7c:dc:b1:2d:e7:be:96:
         07:ce:6b:08:c0:1b:d1:72:60:dc:9d:48:2f:25:32:b0:57:2b:
         74:54:95:5e:98:47:ca:6d:c9:6a:f8:79:46:8e:68:37:f2:44:
         67:b2:5c:35:2d:08:3f:87:9c:20:ff:cc:2b:ee:fc:e6:1b:49:
         c9:c0:38:39:54:8e:98:c5:9b:80:ab:07:67:52:99:6a:d0:0e:
         e9:f4:f6:88:85:fd:db:e4:74:52:b2:31:02:31:e4:66:3d:4c:
         45:53:08:bd:bd:4f:25:31:3c:75:27:1d:c6:84:67:14:b3:16:
         24:be:6b:d2:07:d9:50:e9:ee:4d:c3:0c:e1:65:65:75:4c:b8:
         63:57:1f:86:30:bf:b3:65:a5:70:0e:f5:20:db:d8:42:e2:d5:
         ac:b1:87:03:a8:85:81:6d:8b:12:8f:2e:7d:11:e6:69:f7:dd:
         8c:dd:ff:cd:bf:18:52:66:e6:f8:96:09:1d:17:60:79:54:2e:
         cb:3f:e2:95:b6:35:d8:29:04:56:99:03:8e:c6:16:7a:43:cf:
         b7:ca:40:87:97:22:19:1a:a9:8e:fe:d5:8d:62:65:49:9e:ed:
         cc:7c:b0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:16:43 2026 by rpki-client