Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
File:                     MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer (raw, json)
Hash identifier:          f6h4KzLpSKpu9NgwA/kO3Y/AUR4mkR2F56X7JB0Bz7Q=
Subject key identifier:   32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B454
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 01:22:03 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 154601
                          IP: 163.128.186.0/23
                          IP: 2402:55e0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 05:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177236 (0x2b454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 13 01:22:03 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91C1D71, serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:7c:03:05:12:00:7b:ca:0e:d3:a0:0b:a0:
                    a0:d1:8a:8a:8f:84:8d:5f:88:41:86:d1:d4:69:55:
                    1e:ff:19:b7:45:5f:38:95:15:d1:81:2f:af:7e:aa:
                    8a:9a:14:c0:c6:1c:02:1e:f9:58:ed:b7:d7:f0:20:
                    dc:97:9d:af:f2:b8:ba:6f:6a:25:b2:60:c0:4e:74:
                    92:d1:af:07:58:63:90:8b:3c:cb:84:df:bc:24:47:
                    bc:94:60:da:83:6e:6a:37:df:e7:f2:77:8f:db:13:
                    6e:cb:27:3f:9c:26:83:3b:05:f2:0e:c4:5e:ca:2d:
                    8a:a3:eb:13:4e:32:3b:b5:16:c9:89:ed:79:d4:82:
                    d2:d3:ac:d0:24:b2:10:5b:4d:57:fe:b9:82:cf:8e:
                    17:bc:59:f1:8b:76:24:f7:06:b5:55:82:bb:6f:77:
                    53:c4:6c:99:5e:7f:66:0d:25:16:65:22:03:b2:07:
                    17:02:cb:9c:af:76:f9:f9:01:c0:26:75:c7:a8:0f:
                    54:cc:d8:77:fa:ab:4e:ce:ac:c9:ea:56:92:ff:1b:
                    a3:c9:98:f1:99:23:c2:ed:3d:1e:95:e8:37:e6:b0:
                    dc:9c:3e:ad:7d:38:a2:ac:c8:aa:41:8b:0b:be:cc:
                    2d:ee:bf:05:1f:ac:ad:2f:79:63:6a:d8:fc:d2:68:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154601

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.186.0/23
                IPv6:
                  2402:55e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:6f:e1:51:eb:f7:75:4e:63:4b:bb:e8:7f:0c:ab:37:d5:
         2f:d2:8d:87:db:22:40:23:6d:c5:a1:dc:1e:f6:c1:81:8b:f7:
         fd:55:46:c7:d6:de:51:f8:45:62:4c:92:54:46:48:fa:c4:01:
         e0:ed:51:70:8e:fe:d1:e6:d3:17:7e:01:44:5a:87:7e:4a:8f:
         7d:ea:67:e8:85:9d:66:b2:3b:c0:01:34:b7:92:d6:72:f2:a0:
         16:2c:9b:ef:ce:cb:9e:1b:13:f9:a6:6c:0b:a0:a9:26:f6:ce:
         f3:6d:32:28:18:73:aa:2e:cd:67:ce:16:1c:38:18:28:bc:e3:
         22:df:fa:94:77:d0:75:13:5e:a9:9c:02:9b:55:cf:43:a3:bb:
         af:da:b7:66:90:98:70:66:c0:d3:79:c2:a3:89:8e:cb:b5:14:
         b4:bb:48:de:31:54:ad:8c:15:fd:2d:71:38:d1:b3:93:b5:b0:
         2f:6d:b2:90:11:59:40:42:d2:51:ab:b9:94:29:32:b9:94:60:
         4e:e1:69:93:d4:bd:c7:84:48:85:fb:db:f8:8c:55:07:cb:c5:
         a0:ab:db:21:5e:a8:6f:4e:c6:45:10:82:63:d3:e0:51:f8:61:
         c1:ce:40:00:b5:0b:96:95:aa:95:d9:ce:26:0c:65:8c:4d:4f:
         44:48:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 10:14:31 2026 by rpki-client