Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer
File:                     bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer (raw, json)
Hash identifier:          Tv7Q9KPKtBBGg9/DYU7RZ+2wPffAnB6WpDssBxBQ3wg=
Subject key identifier:   6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C908
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 10:52:39 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 137501
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 10:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182536 (0x2c908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 10:52:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91ED89F, serialNumber=6C719908F2E168CD6BF18BCD6D47788637C3846E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:3f:eb:a3:e4:13:5a:11:da:57:74:cd:1e:
                    8a:7c:1d:3c:37:b9:a8:b3:9d:a1:9c:e4:c7:fd:23:
                    7c:83:70:aa:b6:00:35:3a:00:6a:22:43:1c:a4:38:
                    c4:4a:28:da:94:d4:b4:09:7d:b1:a2:d1:52:0d:71:
                    5d:39:65:f4:53:10:a5:02:ae:f7:e1:1b:1c:94:ba:
                    4e:e7:4b:31:79:3c:76:26:49:9c:c1:b3:4b:d4:4f:
                    d1:17:8c:b0:c3:3f:7f:47:97:6f:4a:47:47:5e:0d:
                    4f:4a:63:56:6d:4c:59:98:a0:d1:e0:b7:a8:b2:03:
                    99:c5:2d:d2:5b:d8:56:eb:da:b7:56:79:20:25:d4:
                    4e:24:25:61:ca:cc:11:c3:97:90:06:a3:d9:4d:24:
                    7c:66:2e:74:7c:1f:8c:3e:3b:af:44:ed:40:c5:e1:
                    d3:01:5c:0c:db:a8:a7:ce:bd:7d:13:07:e8:b3:f8:
                    b3:6d:45:ac:c0:fd:2a:d3:f2:4c:e2:81:42:dc:16:
                    87:f8:c2:70:4c:aa:5b:cf:72:e8:e8:2f:f7:3e:95:
                    51:40:dc:51:36:32:80:82:db:86:6d:5c:ae:47:47:
                    ec:cc:7c:97:62:9c:f5:de:2e:dd:c3:28:10:40:8e:
                    aa:90:e8:31:50:82:8a:69:8c:54:85:ca:76:1b:8a:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137501

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:72:25:64:77:e6:db:8e:b7:1c:2a:51:ef:40:5d:b1:c2:
         4b:03:05:3f:0b:34:dc:e5:8c:b7:b3:64:09:70:08:8b:94:0c:
         fb:cb:91:d8:92:fa:41:f8:2c:72:dc:f1:09:30:1f:58:c5:c1:
         48:2e:29:a5:f4:3c:49:98:31:e0:d0:04:6f:a7:db:18:e2:a2:
         5c:07:98:ad:f8:57:8d:b6:28:ad:94:ab:94:e3:f1:0a:d3:fe:
         0a:38:93:d7:1e:1e:03:7c:bf:b7:ee:83:38:32:78:41:cc:35:
         53:cf:cf:b5:6a:2b:47:fa:70:f5:5d:54:90:38:74:73:09:ff:
         6f:5d:ab:25:56:ac:9a:c4:16:e9:d8:b1:d2:d9:cb:8a:2f:83:
         a9:00:ab:a9:e9:40:d0:3a:60:ba:e2:7e:bb:f9:22:79:ed:92:
         e2:60:ff:71:dc:db:92:0b:3c:6b:19:05:e8:1b:95:11:b5:ea:
         04:c4:34:7e:b8:e4:88:5d:ee:06:85:aa:2e:fb:d2:a1:83:50:
         cf:02:07:5a:64:4f:5f:d9:d1:2b:75:e4:b4:90:b2:00:99:48:
         0e:a9:c2:98:33:52:55:54:9d:d3:72:12:1a:6c:71:16:55:e7:
         ed:15:8f:7d:93:4c:b6:18:c8:e0:80:22:37:36:a4:25:51:0d:
         21:85:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:08 2026 by rpki-client