Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
File:                     Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer (raw, json)
Hash identifier:          yl4hb06rwPR41oC8OAJoUMHtHMPj+FF18EZ1DNF1uS8=
Subject key identifier:   39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C84C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Jul 2026 03:56:41 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 154776
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182348 (0x2c84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 29 03:56:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9129F26, serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:13:16:a9:ea:cf:f6:89:ca:bf:cb:1b:b1:
                    ab:dd:af:26:07:d4:67:57:47:30:07:d6:fa:18:61:
                    fa:ef:ca:84:1f:6e:f4:df:4a:3d:fd:01:4e:09:5f:
                    af:2d:24:af:60:bc:4d:bb:af:2c:0a:a4:85:9f:4b:
                    cb:c9:d6:81:c0:a5:7f:fa:7c:ee:a7:67:bf:c7:58:
                    50:69:54:c2:f3:a2:71:38:28:ff:4f:78:22:cb:3d:
                    f0:45:d5:ab:fc:b9:56:8a:93:aa:c8:62:75:de:4c:
                    4a:d1:ea:c4:f9:3c:54:9e:39:ad:21:75:15:f3:a2:
                    78:77:48:3b:a9:cf:24:5f:89:be:44:3e:9d:47:6e:
                    d4:1e:c9:28:90:36:67:e6:06:19:69:57:6f:98:86:
                    9d:da:69:fd:4e:5a:03:ed:32:a0:f0:b7:ea:61:55:
                    92:fc:91:5c:d7:9b:9d:b8:a3:64:57:4c:26:66:81:
                    fa:a3:56:41:4f:ad:08:e8:7d:02:52:37:88:ec:fc:
                    ec:d7:f6:4c:5f:92:64:c4:e9:8a:08:95:fb:07:ee:
                    f0:18:3e:98:17:07:78:92:e2:b4:b6:3a:aa:b7:dd:
                    72:fc:f3:aa:5e:cc:c9:90:88:b5:a9:96:f1:d5:e5:
                    a2:36:6a:64:d7:c8:f1:4b:c3:49:36:76:1e:f8:4c:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154776

    Signature Algorithm: sha256WithRSAEncryption
         85:91:84:e7:ab:81:bf:e5:7f:82:ba:83:74:ce:12:e4:68:39:
         f0:b8:d6:d2:2c:af:d2:49:0a:e1:26:ab:45:ca:2a:f7:19:21:
         59:b5:9b:08:8f:17:ee:23:11:8d:3b:08:bc:9a:82:15:af:7b:
         14:96:13:ce:01:e1:1f:29:62:31:7e:e3:9f:06:81:01:82:41:
         5c:1d:d4:e8:67:d1:fa:d3:2d:2f:94:81:66:a7:42:b7:8b:c6:
         e9:0c:c2:91:55:18:4e:72:d1:10:1b:cc:69:63:46:8b:0e:e2:
         ab:15:49:dc:b2:ab:cc:5c:41:bf:57:bb:08:8d:c7:1e:54:d2:
         4c:ed:d5:0c:75:06:32:d9:df:23:a0:85:2e:aa:50:30:4e:e9:
         a9:52:fe:5f:d5:0c:bd:8c:8e:eb:fa:1a:e1:4f:42:13:eb:e5:
         ea:ce:7d:df:f5:82:be:c9:97:26:3c:62:89:8a:59:40:f1:6b:
         86:db:74:e2:8e:ed:99:70:98:7b:41:85:b7:83:03:8e:0f:1d:
         f2:1f:93:f5:78:09:b8:40:5a:26:b7:31:57:19:67:0d:d2:d2:
         fc:0c:ab:df:f1:75:2a:34:9b:0a:9b:bc:29:87:2f:50:f8:68:
         a6:fd:9a:02:a4:ca:0b:2a:80:d7:50:e0:1c:ec:0b:25:6e:a1:
         0b:a2:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:06 2026 by rpki-client