Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
File:                     cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer (raw, json)
Hash identifier:          11m07QkkveerNeCtl7SkSQ/XJHRLhswC/wXhXOVipRI=
Subject key identifier:   71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A7D8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Mar 2026 12:35:59 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 9497
                          AS: 9742
                          AS: 17749
                          AS: 17973
                          AS: 18115
                          AS: 23701
                          AS: 23933
                          AS: 24106
                          AS: 24551
                          AS: 38183
                          AS: 38268
                          AS: 45789
                          AS: 55413
                          AS: 55704
                          IP: 115.146.128.0/19
                          IP: 2405:b800::/31
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174040 (0x2a7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 31 12:35:59 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:bd:7f:3f:de:58:84:82:62:31:e3:a2:d0:
                    63:12:2f:77:49:ed:30:5b:8d:67:79:9e:dd:ca:50:
                    c2:10:35:6d:39:c8:dd:6e:c0:f7:4f:8f:00:5d:c4:
                    5c:0a:fb:2f:e8:2b:28:26:e1:ad:18:56:62:2c:21:
                    29:20:34:8c:71:c4:c1:fb:e3:ec:8c:9f:1c:65:b5:
                    d3:c7:24:64:5d:b2:b9:27:97:54:f6:ca:82:2c:ff:
                    00:3a:50:b3:04:5c:ce:f0:b0:b1:4d:16:39:5c:3a:
                    3a:25:fb:22:e7:3e:98:71:ff:69:58:3d:88:28:58:
                    60:c6:57:fa:c0:41:61:bf:76:49:69:14:86:3c:75:
                    2b:a5:27:d3:8e:5c:6e:f7:fd:aa:64:23:9c:42:32:
                    2b:91:c3:3a:f0:fb:4e:5c:63:bc:14:a1:bc:82:e1:
                    08:3f:0a:cd:77:ac:50:df:cf:05:59:2e:20:90:74:
                    d3:8e:04:f9:2c:26:8b:aa:f8:06:5b:ce:88:64:94:
                    f4:87:bf:3a:3c:5e:1d:d0:d9:80:31:a2:d7:47:e8:
                    66:a0:40:67:f8:f4:5e:46:a9:01:6a:d6:5b:c4:0f:
                    cb:a2:8b:d2:4a:37:66:f1:b0:69:df:7c:35:6d:b0:
                    3e:06:af:a8:e7:13:82:ce:78:46:d1:fd:fd:59:16:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9497
                  9742
                  17749
                  17973
                  18115
                  23701
                  23933
                  24106
                  24551
                  38183
                  38268
                  45789
                  55413
                  55704

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.146.128.0/19
                IPv6:
                  2405:b800::/31

    Signature Algorithm: sha256WithRSAEncryption
         be:89:2c:d2:b8:3f:9d:51:6d:46:57:9b:fb:e4:43:b1:1d:5c:
         e5:8d:2e:fc:7e:9e:af:22:c9:ec:30:42:ea:fa:69:07:82:62:
         bf:67:77:46:e3:80:53:c2:10:10:b5:92:5a:b4:8b:fa:ee:59:
         2b:4b:c7:0e:a7:78:56:a4:c0:b4:6f:57:a0:25:46:15:8f:f9:
         39:83:86:67:3e:87:a9:fb:9d:b8:2a:91:18:ff:0e:43:03:e1:
         8a:74:de:a7:ab:a7:66:fd:cf:85:d0:b7:e4:3a:85:43:15:d6:
         dc:af:7f:18:be:cc:91:2b:08:11:89:d0:21:f9:6b:5f:3d:a9:
         b6:cb:91:57:2e:cf:dc:20:37:0d:26:57:2e:91:01:c2:d4:a5:
         73:03:bf:53:4d:7b:f4:78:77:63:50:5c:fc:3d:7e:ee:5e:59:
         5f:f6:d5:0b:c8:75:d8:6a:ec:b2:d5:68:f9:07:0b:d9:12:be:
         e0:80:fd:2f:e3:fd:b5:38:5e:78:a4:51:66:6d:6e:c7:4a:98:
         10:91:b5:3f:7c:4a:03:05:bb:2e:35:2e:fd:80:cd:ac:4b:b7:
         a7:9d:2d:59:05:e4:23:69:e6:5f:ca:81:03:72:13:75:4b:0f:
         59:52:ab:52:02:ab:ce:b5:e2:f0:e3:7f:3c:3d:4b:51:57:61:
         ad:43:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 07:14:08 2026 by rpki-client