Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtCNqU9fTob_Z4LYAIHL-2hkZYg.cer
File:                     BtCNqU9fTob_Z4LYAIHL-2hkZYg.cer (raw, json)
Hash identifier:          PmoFpZpnNi1hi5dyDHlhNzPPfT71jqBJ5I+W4iJc/QM=
Subject key identifier:   06:D0:8D:A9:4F:5F:4E:86:FF:67:82:D8:00:81:CB:FB:68:64:65:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D8C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AAB4E/84779956BADE11F1B90B135F5311F970/BtCNqU9fTob_Z4LYAIHL-2hkZYg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AAB4E/84779956BADE11F1B90B135F5311F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 28 Sep 2026 01:47:13 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 38462
                          IP: 113.130.0.0/18
                          IP: 116.214.80.0/20
                          IP: 119.82.16.0/21
                          IP: 120.50.208.0/20
                          IP: 120.143.64.0/19
                          IP: 203.86.248.0/23
                          IP: 2405:8000::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186567 (0x2d8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 28 01:47:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91AAB4E, serialNumber=06D08DA94F5F4E86FF6782D80081CBFB68646588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:37:4a:df:df:ef:34:62:8b:73:bc:fc:23:
                    2c:6f:76:8a:9d:92:6a:28:87:1c:b3:fc:42:7e:b4:
                    1b:05:7e:71:a1:ab:b8:fe:5a:90:dd:98:d9:a3:f7:
                    0f:dc:f9:84:41:38:58:08:b5:f9:17:ec:5f:e1:5f:
                    ab:86:0a:9b:93:b7:35:be:2e:ad:3c:50:08:3d:24:
                    73:37:e7:6e:d1:71:da:b4:44:81:e5:35:e0:61:ca:
                    6c:ba:0d:51:8e:67:d8:f6:b5:20:54:93:cc:9a:84:
                    8f:6e:95:54:dd:f9:e8:64:8b:d8:28:e7:2c:1e:e3:
                    31:2b:e0:ca:2c:b3:04:04:9d:1b:4d:0e:3d:34:e9:
                    53:fe:dc:8a:a4:46:62:db:57:30:0d:c7:45:8e:4c:
                    c9:37:77:1e:ae:5d:63:cf:79:ec:0a:f9:1a:ed:98:
                    b6:9e:81:b0:d5:0d:23:92:d9:0a:d6:54:68:4d:9e:
                    da:87:af:69:ee:e0:39:a5:ae:76:7d:6e:a4:a3:84:
                    62:92:3b:c4:2e:d0:56:b4:e9:50:f1:fb:1f:2a:93:
                    8f:fd:c4:48:02:81:ab:82:0a:17:17:22:e4:74:e5:
                    b1:e2:2d:6f:59:03:b3:e0:c1:28:b3:83:09:3a:15:
                    cb:96:b0:21:06:e2:30:d9:9b:b1:cc:18:36:10:ac:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:8D:A9:4F:5F:4E:86:FF:67:82:D8:00:81:CB:FB:68:64:65:88
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAB4E/84779956BADE11F1B90B135F5311F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAB4E/84779956BADE11F1B90B135F5311F970/BtCNqU9fTob_Z4LYAIHL-2hkZYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38462

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.130.0.0/18
                  116.214.80.0/20
                  119.82.16.0/21
                  120.50.208.0/20
                  120.143.64.0/19
                  203.86.248.0/23
                IPv6:
                  2405:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:df:c8:96:77:fa:b9:49:1c:3c:ec:26:3f:a7:c6:12:d7:
         ea:cf:c3:c5:9b:e6:db:7e:96:fc:37:f9:e0:3f:6b:fe:86:4c:
         38:85:40:e5:c0:af:46:c6:d9:39:45:6c:e0:3a:f4:0d:ea:03:
         55:60:b9:9c:26:d5:72:2d:f0:b9:a1:8f:a9:fa:9b:94:86:c3:
         84:1d:23:c8:14:23:99:43:13:17:d3:0f:19:f2:29:ec:21:87:
         48:9c:11:d1:c2:99:3c:a8:e4:54:9b:b0:83:f3:33:b4:6e:fe:
         8f:8c:08:5d:3f:b6:8e:19:87:95:65:63:3a:b4:01:9b:95:f1:
         9c:1b:d2:af:ad:c9:8d:fe:dd:36:96:3b:f6:16:ef:41:95:ab:
         06:73:0c:fb:6f:02:16:eb:28:ac:d1:66:d6:20:dd:fc:2c:4c:
         81:41:6b:fa:e7:f7:b9:60:6f:34:e2:b7:18:4c:dd:64:84:1c:
         07:3d:ce:f6:a1:39:64:a3:19:5a:81:36:2b:0d:0a:c3:73:2f:
         cf:23:f5:d9:e3:bb:f2:13:0a:10:64:9b:dc:d9:01:81:61:45:
         03:d3:d7:56:c3:4a:d2:87:d1:5b:51:cd:7a:6c:cb:d3:ac:b0:
         79:07:17:9e:a7:0f:d0:cc:a7:aa:69:38:07:1a:c1:71:05:cb:
         88:b8:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:03 2026 by rpki-client