Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
File:                     eEgGhmLmMK0APXDe2HIXjOg8DEs.cer (raw, json)
Hash identifier:          gwfEQQAK3PwYnVeAdpaXCwttSczPZi9BzYhM3A9zkcw=
Subject key identifier:   78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CA93
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Aug 2026 08:20:54 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 154786
                          IP: 2001:df7:4fc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 10:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182931 (0x2ca93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  3 08:20:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91C873A, serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:34:ce:93:a1:87:98:bb:b2:b9:ab:2a:2a:
                    4f:c1:ff:90:47:85:8d:23:a5:9b:dc:53:62:d2:30:
                    e9:7e:f4:a0:af:26:df:19:5e:9d:e4:ca:bf:a2:00:
                    82:cb:56:05:be:ac:a0:d7:ec:4c:66:2c:12:cc:6c:
                    32:ac:bd:cc:19:11:e2:b4:30:03:b7:2f:8f:c4:2d:
                    28:f5:39:99:2b:1e:a2:c8:d5:4f:be:3e:6d:fc:cb:
                    f2:2a:66:fd:88:04:b0:c5:6d:f5:01:82:10:0a:83:
                    6b:3f:e3:a8:7e:c7:9f:93:8e:9f:e7:25:a8:69:db:
                    b9:1c:72:88:62:34:45:fb:be:a8:f8:29:8c:e9:9a:
                    7e:d7:bc:86:1e:44:a3:57:86:a1:fa:62:1a:97:11:
                    f0:9e:46:ba:1d:05:83:21:1d:59:8a:df:cb:90:4e:
                    d1:1a:bf:06:7a:70:06:cd:e9:c1:94:1c:ae:5f:de:
                    13:fe:4e:0b:b7:d6:5c:b9:d9:0f:06:3e:ac:10:84:
                    42:bf:f8:4e:1a:b2:ad:ad:8c:0f:86:e0:10:5b:dc:
                    da:ac:2c:46:69:3f:ea:34:1d:de:81:c5:f1:c7:a0:
                    b3:a4:55:24:b8:02:cb:c8:c1:b2:be:49:80:43:c6:
                    00:b0:28:c0:eb:f7:9f:6d:e0:11:72:1c:56:bc:11:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154786

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:a6:48:59:5a:7e:98:db:2d:78:1f:cb:2c:68:f8:b2:5b:
         30:49:8c:eb:91:bd:f5:9d:19:d0:1d:58:0e:37:d9:0f:14:fe:
         da:03:52:5d:b9:16:3b:3f:d1:69:39:0b:5e:e0:d4:6c:52:5b:
         f3:ad:b3:6e:a8:1d:fe:2e:13:0b:72:1f:c9:1c:0c:93:b9:09:
         b0:1a:b9:ad:87:db:44:3f:e9:d5:f3:f0:a9:ff:c1:6b:c6:f7:
         42:3e:2a:df:7c:8d:62:08:24:6f:bf:97:31:7c:13:31:03:38:
         e4:9c:11:3c:86:2c:c9:d7:e0:fe:4c:4c:b9:65:10:a1:c0:43:
         03:14:44:3d:57:0b:95:69:62:70:bb:58:16:de:5b:2c:e6:6b:
         68:49:77:f9:01:90:eb:90:12:43:53:2a:5a:2c:f9:3f:e5:2a:
         60:12:07:4a:f0:83:f4:9a:ac:99:ad:77:6d:31:e4:b9:16:b2:
         7f:1d:78:ed:60:c1:da:a1:24:9d:3d:14:3b:1d:59:7d:04:ac:
         95:7b:cd:bb:b4:ea:dd:af:ec:fe:3e:91:c8:87:20:d4:c4:a7:
         4c:54:20:39:2e:86:d9:5c:5b:82:30:02:8a:85:4d:c1:72:86:
         f2:b4:71:f5:11:e1:91:1b:a2:0b:e5:11:16:fc:db:89:47:71:
         f6:c4:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:08 2026 by rpki-client