Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
File:                     ICB51sn-B78YYiHRqZgny_axIq4.cer (raw, json)
Hash identifier:          5QstD0DkFHaUpXhkhHW+6YN5L5Re77fqz4CuVdyb6Ho=
Subject key identifier:   20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C0AE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 13:36:20 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 45.115.24.0/22
                          IP: 103.55.8.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180398 (0x2c0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 30 13:36:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:40:a3:22:3b:27:f6:dc:8c:16:0f:07:8a:
                    50:3a:2e:10:ab:b8:ba:78:f5:25:3b:28:43:56:29:
                    da:8b:23:e3:03:16:65:e6:69:50:fa:5d:51:d7:64:
                    29:88:67:f5:54:84:3d:00:96:77:08:1a:e4:ae:8d:
                    01:ed:1e:6d:df:28:1d:f0:63:23:18:05:51:95:44:
                    da:a1:d8:b6:c4:4d:98:03:75:ef:74:af:f0:2a:b4:
                    ff:dc:bb:9c:e8:5f:40:04:f9:8d:79:b1:20:66:2b:
                    3c:fb:ee:00:a5:4c:52:0f:03:eb:d4:43:42:c9:99:
                    ea:3d:4e:9d:28:ac:77:42:83:dd:65:03:6f:23:5d:
                    e7:b4:46:ac:7c:ac:93:59:e6:1e:5c:d3:2c:2d:cf:
                    55:0d:a2:b3:ff:d7:cf:36:28:b6:b4:d0:87:84:1a:
                    ac:0f:1c:8b:5c:6e:5d:94:8f:05:51:4b:3b:4a:89:
                    e0:86:47:c5:30:18:6d:a1:8e:c4:58:d1:e8:a6:a1:
                    ab:1d:19:c5:13:dc:10:b2:f9:8e:5d:e6:f4:09:d1:
                    5f:c8:d8:7b:eb:1c:57:52:7a:bc:40:98:cf:85:42:
                    26:90:ed:f4:a8:7e:99:09:9f:39:bb:1f:eb:54:ee:
                    c3:1d:f8:d3:1d:f5:54:40:66:66:aa:aa:3a:a4:51:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/22
                  103.55.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1c:b6:6d:46:cd:f9:d8:57:88:1f:2b:84:57:92:b8:88:98:
         01:5c:16:d2:19:54:d7:09:e8:67:af:70:42:68:d5:18:15:e0:
         0e:d0:1e:41:1b:f9:95:48:22:a5:c1:6f:ca:9e:c3:be:73:b2:
         7f:9b:f8:b1:a6:7b:e3:8e:64:bd:fc:3f:8c:1f:47:86:2c:4a:
         12:89:47:11:7d:00:87:55:24:1d:8d:21:e7:2a:cf:94:d8:8f:
         d1:f4:0f:ba:c0:4d:c6:83:fa:e8:90:ee:e9:79:ae:f7:06:55:
         f5:d5:bf:3e:e4:04:ec:65:38:a2:91:93:ca:af:1d:b9:e6:e8:
         3d:18:47:00:81:93:dc:ba:7a:08:99:42:cd:37:2a:69:eb:05:
         31:cc:66:7d:9b:f0:f1:67:93:59:84:8c:c7:3b:20:19:54:0d:
         4a:1b:53:bb:af:7d:ff:96:95:a9:8b:62:8e:65:5c:e1:e1:02:
         22:99:05:15:e1:05:f9:99:fb:22:c7:e5:c1:6c:bf:a9:eb:3b:
         b3:fe:6a:15:35:4e:14:02:cb:12:7e:30:ad:c4:04:5a:38:76:
         68:5e:4d:e9:22:83:66:f2:77:18:1f:6f:2c:82:e6:7a:79:17:
         12:e5:be:61:b9:1a:93:4b:f7:69:73:28:08:82:0e:ad:8a:d9:
         79:c7:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:05 2026 by rpki-client