Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.cer
File:                     E2Yc7JsSsHg3H_2gWWT1vlmbiRU.cer (raw, json)
Hash identifier:          CbPrtIm7kHIwZuwPz1U9wJdA8sKQOsKUd6XjfOWZ87g=
Subject key identifier:   13:66:1C:EC:9B:12:B0:78:37:1F:FD:A0:59:64:F5:BE:59:9B:89:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C498
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 13 Jul 2026 00:41:49 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 142245
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181400 (0x2c498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 13 00:41:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91B18B5, serialNumber=13661CEC9B12B078371FFDA05964F5BE599B8915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:51:e4:52:82:16:06:03:75:b9:c4:45:24:
                    d0:79:10:8f:86:95:d9:24:42:5b:42:d4:35:93:f8:
                    ae:ec:de:1f:f1:76:4e:d0:d3:08:41:23:61:be:2d:
                    bf:e1:0c:09:6a:06:b7:3b:4a:96:e5:38:96:3f:2c:
                    b9:09:a4:ea:40:6a:b0:22:69:5e:5a:09:9c:6c:58:
                    6e:b8:4c:8e:0f:cd:4a:c7:69:ef:37:87:30:cb:c1:
                    14:e7:cf:f6:4c:d3:18:b5:04:5c:cc:2c:13:38:77:
                    11:8b:5e:43:8c:a7:e9:00:cc:b9:90:25:21:d1:9b:
                    9a:1b:fa:ca:b4:7f:40:4e:1a:f7:2b:39:85:f0:e3:
                    ec:5d:62:20:bc:ab:7b:77:88:9e:94:70:f9:91:a3:
                    6c:81:e1:d4:af:a8:0e:47:b0:9d:71:b9:3b:f9:05:
                    79:83:c4:54:23:9c:be:ed:5d:5c:c8:1e:65:14:3f:
                    ec:70:6e:a9:72:e1:80:f0:73:23:35:4b:0e:5d:15:
                    e9:86:31:e5:39:4d:ea:99:03:a9:74:75:99:dc:5a:
                    5d:77:7d:23:51:6a:0a:5f:ec:53:0d:a0:47:a6:96:
                    98:23:3e:06:9c:f5:ef:9d:52:c2:18:c9:6c:a4:c0:
                    fa:93:d3:7f:7d:d5:7b:3e:16:9b:9a:3d:8a:3c:52:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:1C:EC:9B:12:B0:78:37:1F:FD:A0:59:64:F5:BE:59:9B:89:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142245

    Signature Algorithm: sha256WithRSAEncryption
         93:41:a8:41:2e:6e:e0:15:f8:2a:8c:0b:e5:48:0e:99:81:9d:
         42:84:2e:97:09:7b:87:8a:cf:96:f1:46:6e:4c:ed:40:09:af:
         6b:97:b1:a1:a5:02:0b:dd:4c:44:75:80:5e:54:c3:55:8a:85:
         84:65:4a:fb:d4:2e:98:6e:73:f9:84:83:9e:33:ba:d0:a2:66:
         b1:20:64:62:ce:5a:04:af:c8:60:8f:b5:d5:61:9a:2a:83:cd:
         f1:c5:ed:0f:9b:cd:3c:a8:16:b6:de:17:b1:28:9b:8e:d1:d9:
         70:3e:f1:a0:b6:a4:54:ec:43:f5:bc:83:9b:04:52:5e:59:1a:
         df:74:5a:b1:65:57:30:4f:f6:21:8e:60:d4:49:bd:e9:56:25:
         57:9a:01:5d:1d:8a:8c:d0:d4:ed:96:ed:c9:de:28:ee:16:c8:
         4d:c2:3d:39:2c:ed:a2:c5:f8:aa:44:2e:09:5b:c8:83:2d:d9:
         5d:31:12:09:48:00:74:23:b1:fa:22:b9:29:b4:5b:f8:97:7c:
         41:d0:63:00:8e:fa:04:3c:a6:18:2b:9a:73:90:b5:39:46:fc:
         55:7e:dd:ce:b0:70:60:57:9b:ce:4a:f9:a6:61:ea:64:87:d2:
         82:f2:d6:67:83:99:df:84:6e:2b:c4:a9:3c:8e:de:d5:8d:c4:
         2e:25:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:04:46 2026 by rpki-client