Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsHonbn2pE44679tDHFoj8rlwYg.cer
File:                     LsHonbn2pE44679tDHFoj8rlwYg.cer (raw, json)
Hash identifier:          A1xRkXjM2hU3U1vb17Vzz4YjSjbHD7yVf3GJ3heN0MQ=
Subject key identifier:   2E:C1:E8:9D:B9:F6:A4:4E:38:EB:BF:6D:0C:71:68:8F:CA:E5:C1:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB49
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9118A92/905EE708608C11F19AE295F36F47A888/LsHonbn2pE44679tDHFoj8rlwYg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9118A92/905EE708608C11F19AE295F36F47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jun 2026 03:13:50 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 150698
                          IP: 2001:df7:1540::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179017 (0x2bb49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  5 03:13:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9118A92, serialNumber=2EC1E89DB9F6A44E38EBBF6D0C71688FCAE5C188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:72:c2:1c:15:7a:96:8b:13:80:ff:2b:2f:
                    50:d7:6a:d7:80:62:6e:e5:93:4b:65:f3:00:70:72:
                    7b:ee:61:c1:5b:ad:f0:81:21:ba:30:d6:73:7d:8d:
                    6f:57:59:fa:7d:ea:16:b9:5e:6d:99:14:b2:40:90:
                    be:24:0e:22:e2:7f:cd:06:c8:ab:57:b5:fa:f0:32:
                    40:60:c7:5b:f3:46:f1:0c:43:b5:b7:01:44:71:d0:
                    fa:45:2e:28:f0:63:ea:b2:08:62:1a:4e:07:fa:9b:
                    4a:eb:c7:fc:30:cd:36:f1:34:58:47:c4:4b:ce:f7:
                    c4:7c:5a:25:e2:c5:26:44:c9:90:b3:56:32:3d:70:
                    da:0a:58:c1:03:62:64:a6:84:37:03:30:0f:4e:52:
                    f5:b7:51:17:1a:58:88:b7:35:f0:16:a3:96:be:0d:
                    b5:58:71:ad:4b:a0:9f:37:43:df:85:be:7a:42:c6:
                    09:e7:36:1f:7b:b8:89:d4:08:8b:2a:c9:88:c3:b9:
                    f1:4d:8c:e9:8d:1f:1e:53:81:5f:25:91:00:6b:94:
                    db:91:29:26:46:eb:94:ad:f3:32:33:e0:1d:87:18:
                    4c:14:83:b6:1c:7e:53:62:4e:34:4c:a9:87:f1:92:
                    25:11:0a:e1:35:78:04:4c:45:7f:75:0b:29:10:3e:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:E8:9D:B9:F6:A4:4E:38:EB:BF:6D:0C:71:68:8F:CA:E5:C1:88
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118A92/905EE708608C11F19AE295F36F47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118A92/905EE708608C11F19AE295F36F47A888/LsHonbn2pE44679tDHFoj8rlwYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150698

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1540::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:72:37:74:ce:04:b9:23:6a:67:c4:37:b6:55:9e:58:38:d2:
         54:9b:4d:f7:3a:7d:da:04:2f:44:2e:5d:c4:91:0b:20:f8:b0:
         6c:f4:cf:0d:b2:cc:cf:9d:7a:d5:3c:31:f4:f6:ad:a4:cb:08:
         22:96:4e:7b:aa:f9:74:86:1d:e5:a6:49:e5:eb:92:d8:c8:3a:
         99:1d:56:be:49:e7:82:c9:62:59:34:38:24:29:c3:5c:d7:25:
         1f:c4:84:18:e7:67:8d:af:3b:6c:d7:e9:fe:2e:04:0f:a2:67:
         32:94:e6:2d:2a:02:ea:33:4a:a6:ef:21:85:f5:d9:cb:b1:23:
         20:47:5a:79:d7:57:e4:c2:c4:64:78:58:d4:c6:c9:b6:f5:db:
         22:30:8d:f3:d4:3e:65:fe:46:b3:1a:eb:71:b8:67:93:d9:74:
         6a:60:14:82:cf:9f:68:81:c2:7f:13:94:be:9f:5b:e6:9b:03:
         8a:bf:f8:b5:fa:4f:f3:61:f1:8f:c6:64:89:e8:b0:4c:bf:fc:
         81:b1:58:d7:2e:f3:17:95:8f:fe:2f:e8:5d:f0:8c:00:7d:3b:
         41:9b:51:73:0e:71:fd:ec:2a:58:6d:f9:04:a7:03:37:21:1c:
         44:e1:6f:62:15:17:99:20:36:c1:26:00:22:80:04:94:6d:c5:
         cc:ff:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:46:47 2026 by rpki-client