Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
File:                     9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer (raw, json)
Hash identifier:          avpd53Qge3CWWcycWfJ4xr0YQz4SRHPwgC9AnZhvhzI=
Subject key identifier:   F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B46F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 12:43:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132044
                          IP: 163.227.42.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177263 (0x2b46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 13 12:43:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:d2:ff:f8:c3:0c:39:36:43:6e:7f:04:aa:
                    1f:6a:e6:f3:17:76:8e:c8:b2:ab:a5:51:c9:86:57:
                    10:0e:d9:13:11:51:3e:6c:70:be:44:53:82:1b:4d:
                    e6:0b:4c:c9:a5:4b:45:6c:50:d0:98:47:95:77:7c:
                    f5:d9:65:f2:c3:1e:ef:7b:53:c2:7b:6c:64:dd:b8:
                    c0:fa:77:b2:b5:69:1d:c3:e4:30:c9:e9:61:d6:64:
                    f4:80:3c:e1:08:43:17:69:62:55:20:26:a0:b7:75:
                    dc:cc:33:89:fe:e2:af:76:da:0b:4c:b4:5b:8d:dd:
                    8a:99:5a:14:94:c6:c9:26:b8:05:e9:dc:e8:05:3c:
                    9a:39:16:df:b3:08:72:0b:57:44:42:4a:b1:6f:ea:
                    dc:85:1e:ad:6c:17:98:6c:d8:6e:6c:41:8a:fd:ba:
                    5e:37:98:7b:61:88:b4:b1:ec:94:27:f8:69:04:83:
                    84:07:11:c3:2d:fa:61:cb:fb:ea:0d:b6:70:74:fc:
                    7c:73:94:7a:f1:32:d7:5c:55:d8:69:4c:24:cc:47:
                    fd:9e:f9:9e:70:ad:e7:d9:61:d0:52:30:de:8e:0d:
                    c2:a7:2e:b4:7a:47:1b:77:fe:41:24:fb:99:b0:f9:
                    13:50:d8:f3:47:28:01:2a:b6:ac:6a:7e:a3:fd:1c:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132044

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:4e:3b:7e:0c:12:90:94:2b:66:c8:43:ef:3b:71:c9:f5:
         e3:68:04:e0:09:18:c0:9f:6a:91:95:a7:2c:6d:31:a9:c9:36:
         43:2a:c3:31:42:8a:78:50:72:88:8c:42:80:37:19:b8:06:d7:
         4f:1b:95:00:f3:3d:d3:c5:cb:b6:00:06:a0:da:c6:34:8f:e1:
         bf:e4:80:75:bd:83:1f:85:fa:62:6b:7c:53:f2:b1:dd:4d:8c:
         17:4f:d7:6f:cd:50:e7:b5:8a:9f:7a:a4:81:48:68:da:9c:62:
         8f:29:6b:1e:3a:9b:c2:13:ab:47:09:81:b2:12:79:21:ef:13:
         ba:80:53:6a:cb:f9:57:84:16:c0:de:9f:4c:68:e7:de:67:db:
         b2:30:f6:9a:8a:94:e2:98:c0:b8:a8:c1:0b:9d:17:61:c6:9c:
         cb:80:1e:94:60:fd:f8:02:53:b2:76:7e:29:de:b1:23:38:f7:
         59:83:1c:8c:0d:d7:9b:1d:09:fa:e4:cd:ef:cc:66:e4:c9:a2:
         70:5d:ce:1c:5e:97:98:00:b7:dc:b9:78:24:11:46:2a:25:fe:
         70:ce:72:db:c1:66:4e:7f:4d:f8:36:a1:bb:5d:a5:5f:64:b2:
         26:c5:8e:fc:b5:76:54:5f:06:f5:6a:b6:76:47:1e:37:3c:2c:
         c5:d0:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:51:40 2026 by rpki-client