Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.cer (raw, json)
Hash identifier:          ty5LrkU0JWg0AM4Awl+U5slHQBviXrwH5Q6eCn3D5xY=
Subject key identifier:   56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B550
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 18 May 2026 13:20:48 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 23744
                          AS: 38470
                          IP: 2400:b300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177488 (0x2b550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 18 13:20:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:13:4d:37:3a:27:03:12:fd:31:f1:75:b7:
                    6d:09:1c:57:71:54:66:c7:ca:bd:76:41:55:72:9e:
                    83:c0:f9:25:cb:9a:b8:11:2f:ae:3f:ae:4e:a8:83:
                    b3:d5:cd:50:e5:83:06:6d:4c:03:7d:a8:aa:76:a3:
                    6a:9d:12:d1:f5:ae:33:a8:87:5f:df:75:1f:b3:35:
                    d9:94:2c:0d:f4:b8:41:ec:29:a6:d8:56:3b:ad:30:
                    9a:fe:31:f5:d7:91:63:f5:07:c2:9c:bf:80:f2:83:
                    52:a7:37:03:0b:0b:cf:71:c1:a5:c8:13:f0:a9:dc:
                    ac:48:7e:83:ed:a6:46:ef:00:cd:0f:4f:49:ae:b7:
                    4a:82:a6:bb:74:ca:6b:6e:e1:68:6f:a5:2f:6c:2c:
                    f4:e1:95:61:1e:e5:8e:3c:9b:70:fe:75:3a:f6:03:
                    67:5d:5c:62:3f:e5:dd:36:ff:1a:67:c0:3f:d7:b0:
                    04:0f:31:00:5b:b3:be:b6:e1:d7:cc:46:9d:50:28:
                    aa:df:ba:5a:23:a7:6a:23:8b:de:e7:23:15:c1:00:
                    d9:4a:fd:37:f4:b3:79:8d:31:ac:5e:89:75:b3:33:
                    64:00:78:4e:37:45:c8:37:68:e5:95:c8:d6:65:cf:
                    37:fa:56:e2:79:df:a9:2c:22:b5:99:83:6b:b0:db:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23744
                  38470

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:e9:8b:d8:85:ba:fb:af:04:1c:46:34:44:23:b2:d3:31:
         98:35:c3:72:65:01:74:f3:2a:72:35:fc:20:bf:0d:4f:2b:8e:
         ea:78:6f:03:15:15:a4:d4:d6:49:85:2e:82:87:7c:39:a0:e0:
         fe:d1:c3:9c:64:60:23:d3:42:3b:b7:ec:4b:3b:52:68:6c:af:
         72:e9:c8:b7:f6:3c:68:2e:96:6b:d5:cd:29:bd:af:5a:ba:08:
         ce:59:63:22:f3:eb:95:6d:eb:b3:fe:26:4c:f2:57:9e:9d:f4:
         a6:18:38:fd:bc:39:f7:f2:46:b4:bc:49:09:ee:6e:b0:d7:ee:
         5a:ec:35:7b:90:79:cb:aa:76:92:2b:2b:b5:be:ee:19:07:19:
         4c:f7:d7:83:eb:67:b3:b1:d7:3c:49:d2:38:09:25:c0:3b:f3:
         71:4e:8a:e5:5c:8f:fd:24:6b:35:e2:7b:ed:09:fb:93:98:31:
         c5:66:ce:4e:c6:5a:4d:de:38:07:d9:90:96:42:da:23:ee:ef:
         f1:29:ec:0d:bf:0b:20:52:12:45:21:87:8f:3b:61:f6:7b:50:
         dd:fa:84:72:a1:fa:0e:f6:cf:a2:03:0d:eb:1a:cf:6f:18:2a:
         70:58:f7:79:fa:e1:8c:51:02:1a:67:59:7c:01:f6:b3:24:b7:
         16:30:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:29:48 2026 by rpki-client