Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
File:                     AryISFcqsaDRBj5XuCIPK1LWvec.cer (raw, json)
Hash identifier:          f1qH6w6bVTEHpUTS82JzNUj8ucp/TTpBqNw74Xjz1Jw=
Subject key identifier:   02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D79B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 22 Sep 2026 12:52:54 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 154170
                          IP: 202.6.194.0/23
                          IP: 2001:df6:e40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186267 (0x2d79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 22 12:52:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:d0:09:5b:d6:55:1b:77:bb:a1:eb:7a:62:
                    9c:56:be:53:e1:e3:89:ac:84:d7:97:2e:4c:aa:e1:
                    15:b5:eb:11:01:c4:ba:5d:e2:a7:43:42:41:18:9a:
                    36:8c:47:cc:a7:f1:f2:4a:33:7e:89:bd:db:3c:ca:
                    53:6e:59:8d:a0:2d:fc:7e:30:04:e8:50:64:06:c7:
                    60:2e:21:a0:aa:f6:10:c7:e7:df:a8:a8:37:9c:8b:
                    73:61:37:71:d8:07:5f:df:2a:6d:ac:26:08:1f:4a:
                    59:f0:1c:e8:5a:3c:f9:94:31:fd:d6:b5:57:f7:c5:
                    2c:2c:cb:35:47:83:ce:81:71:6c:56:bb:3e:2b:40:
                    de:81:f3:ad:82:ec:a5:07:c7:d2:f5:76:d1:55:09:
                    e9:b6:19:7b:00:44:da:97:ce:47:13:c3:5f:52:8d:
                    40:92:20:63:d8:dd:29:e1:0d:fc:d9:91:70:68:a4:
                    e7:f5:21:94:23:58:58:c2:f8:2f:99:b6:26:8d:2c:
                    54:0d:69:1d:b6:f7:cb:c5:c3:e2:96:65:10:43:5a:
                    33:bd:60:2b:1d:ce:81:4d:29:9b:0f:f6:8e:7c:0a:
                    fc:6e:67:08:8b:60:90:7d:ea:eb:98:1a:72:04:d0:
                    13:2a:45:87:56:d3:11:1d:64:3e:36:53:9d:3e:fe:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154170

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.194.0/23
                IPv6:
                  2001:df6:e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:9d:95:47:ff:c3:ca:70:3f:a2:c5:cc:bf:d3:15:e7:df:
         48:38:85:24:95:72:f5:7c:ec:40:e4:05:e5:e3:d9:dc:09:a7:
         b2:6e:26:22:27:f0:3e:e6:66:a5:a4:b7:cd:5e:5d:91:13:8b:
         fd:dd:9f:bd:07:ac:af:0b:c6:a6:9e:ca:6c:fa:e6:6d:dc:be:
         6b:14:b3:22:bd:fe:83:56:85:dd:3a:75:e0:b3:ed:18:31:a3:
         3d:a1:69:fc:61:b3:ef:38:fd:2e:16:a4:fe:3e:2f:e5:9b:31:
         18:52:df:fb:63:5d:e9:c1:9e:8d:c7:6b:ff:75:42:fc:dd:88:
         9e:6f:ba:2e:38:98:94:c1:4a:ac:af:97:7d:78:80:1c:52:57:
         5f:ca:ba:b7:0d:6f:01:9a:db:8c:67:76:d5:8f:f4:f3:04:87:
         35:8d:59:54:8b:e6:5e:f1:45:d3:eb:13:61:84:d5:6a:91:0e:
         63:d3:0f:8d:ee:5e:e7:ce:3b:c5:12:3b:51:65:3d:e0:39:7b:
         b6:6d:b9:75:95:11:65:8c:27:69:cb:31:84:3b:3f:2a:48:5a:
         83:84:6d:ab:ba:ad:69:11:43:13:4b:0b:35:2f:3d:cd:41:fb:
         58:b8:09:51:93:24:d8:82:b6:ce:8c:04:f3:08:ad:c4:e6:0e:
         49:9a:7e:af
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAtebMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyMjEyNTI1NFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTNCNTgxMTAvBgNVBAUTKDAyQkM4ODQ4NTcyQUIxQTBEMTA2M0U1
N0I4MjIwRjJCNTJENkJERTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDj+tAJW9ZVG3e7oet6YpxWvlPh44mshNeXLkyq4RW16xEBxLpd4qdDQkEYmjaM
R8yn8fJKM36Jvds8ylNuWY2gLfx+MAToUGQGx2AuIaCq9hDH59+oqDeci3NhN3HY
B1/fKm2sJggfSlnwHOhaPPmUMf3WtVf3xSwsyzVHg86BcWxWuz4rQN6B862C7KUH
x9L1dtFVCem2GXsARNqXzkcTw19SjUCSIGPY3SnhDfzZkXBopOf1IZQjWFjC+C+Z
tiaNLFQNaR2298vFw+KWZRBDWjO9YCsdzoFNKZsP9o58CvxuZwiLYJB96uuYGnIE
0BMqRYdW0xEdZD42U50+/j9tAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUAryISFcq
saDRBj5XuCIPK1LWvecwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUzQjU4LzQyQTUyNjQ0RDk1RjExRjBBQTE1ODZBMTk2RDM2NDFELzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1M0I1OC80MkE1MjY0NEQ5NUYxMUYwQUExNTg2QTE5NkQzNjQxRC9BcnlJU0Zj
cXNhRFJCajVYdUNJUEsxTFd2ZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlo6MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBygbCMA8EAgAC
MAkDBwAgAQ32DkAwDQYJKoZIhvcNAQELBQADggEBALhYnZVH/8PKcD+ixcy/0xXn
30g4hSSVcvV87EDkBeXj2dwJp7JuJiIn8D7mZqWkt81eXZETi/3dn70HrK8Lxqae
ymz65m3cvmsUsyK9/oNWhd06deCz7Rgxoz2hafxhs+84/S4WpP4+L+WbMRhS3/tj
XenBno3Ha/91QvzdiJ5vui44mJTBSqyvl314gBxSV1/KurcNbwGa24xndtWP9PME
hzWNWVSL5l7xRdPrE2GE1WqRDmPTD43uXufOO8USO1FlPeA5e7ZtuXWVEWWMJ2nL
MYQ7PypIWoOEbau6rWkRQxNLCzUvPc1B+1i4CVGTJNiCts6MBPMIrcTmDkmafq8=
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:38 2026 by rpki-client