Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
File:                     ep7epfyIL4Z-ujeIm807O7SsYjE.cer (raw, json)
Hash identifier:          IDiCi8L4tLbsVnGatkxUq8wIMS9Me8TSNEb88tAVzSg=
Subject key identifier:   7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       024809
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 22 May 2025 07:19:33 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 153885
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 07:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149513 (0x24809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 22 07:19:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:2a:d3:e5:bb:ad:59:4f:d9:a9:e7:4c:b9:
                    85:fa:39:f3:25:85:f9:d0:06:2a:71:34:a5:b0:26:
                    13:42:46:18:60:8a:36:2d:7f:ab:66:82:20:9e:ce:
                    0b:94:71:9f:fc:b3:94:38:80:20:7b:fa:d0:42:12:
                    6f:ee:bd:12:9b:52:3b:41:30:93:c2:c2:9d:24:5f:
                    18:ba:34:9a:50:3d:4c:bb:9a:d4:b7:e2:85:7c:41:
                    72:e2:46:7c:cb:7c:6f:d5:d7:81:56:8e:aa:2b:67:
                    6f:79:d8:f4:8a:07:e7:fc:4c:ed:57:be:10:7a:fc:
                    d9:4a:49:49:36:92:36:c2:bf:a3:0a:45:39:e6:86:
                    03:22:9f:ac:a5:93:b7:46:27:53:c4:af:18:6a:40:
                    cd:79:0f:22:38:b5:80:13:3f:1f:7c:24:a9:b1:00:
                    47:6f:76:09:10:40:60:77:8d:70:2b:b2:62:5a:58:
                    2f:f4:1f:c4:f9:76:f6:74:de:96:f2:94:3d:b0:76:
                    e1:ff:d2:d9:85:ba:97:ff:28:3e:0b:df:55:b5:2f:
                    4e:06:09:44:31:a9:d6:c5:37:60:be:fd:24:37:51:
                    45:3c:1a:6c:31:a5:a2:0f:da:cd:c0:94:17:1f:9d:
                    28:a4:23:31:f6:74:bf:9c:7d:1b:a1:6f:96:85:1e:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153885

    Signature Algorithm: sha256WithRSAEncryption
         03:ff:e4:46:c1:76:12:ab:3f:22:80:76:92:ae:aa:6d:bc:9c:
         df:87:f6:23:d6:6a:45:89:d8:b7:d1:c1:47:79:77:af:bb:21:
         17:82:88:7d:bd:3d:a8:22:c0:10:b8:2b:f8:a1:cb:91:f9:e8:
         f7:68:09:53:74:2d:42:bc:5d:4e:c0:e0:e6:91:d6:69:09:4c:
         3c:87:1c:f2:a8:17:c8:76:05:cf:47:1b:d0:43:d0:0f:9f:02:
         b9:06:d6:4c:83:2e:dd:42:85:ab:72:17:a7:e7:64:e7:aa:82:
         dd:32:6d:ea:5c:b1:2c:8f:63:a4:e6:d4:ec:2f:7d:59:d6:b1:
         94:18:b4:70:f7:61:9b:b7:2f:93:4d:4e:a2:64:0a:37:08:24:
         a1:1e:34:c3:b4:99:2c:e0:96:e8:75:34:43:6d:1b:3b:19:f9:
         50:82:56:10:22:7c:b5:64:be:d4:c6:e7:83:bd:e2:1b:5d:eb:
         ed:35:c1:fa:f2:92:8e:9a:de:75:14:33:34:d7:15:5f:62:77:
         09:f7:1a:50:a2:73:a1:c3:4b:22:83:52:fb:e3:0a:7d:a8:40:
         d3:73:d0:93:ee:e9:7f:c6:56:63:8b:b8:5f:e7:94:2d:cc:f0:
         04:3a:ec:4f:d5:94:0e:7e:46:32:a1:58:3e:85:33:ce:1d:a5:
         9f:49:3b:0f
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAkgJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUyMjA3MTkzM1oXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUJCQUYxMTAvBgNVBAUTKDdBOUVERUE1RkM4ODJGODY3RUJBMzc4
ODlCQ0QzQjNCQjRBQzYyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwzSrT5butWU/ZqedMuYX6OfMlhfnQBipxNKWwJhNCRhhgijYtf6tmgiCezguU
cZ/8s5Q4gCB7+tBCEm/uvRKbUjtBMJPCwp0kXxi6NJpQPUy7mtS34oV8QXLiRnzL
fG/V14FWjqorZ2952PSKB+f8TO1XvhB6/NlKSUk2kjbCv6MKRTnmhgMin6ylk7dG
J1PErxhqQM15DyI4tYATPx98JKmxAEdvdgkQQGB3jXArsmJaWC/0H8T5dvZ03pby
lD2wduH/0tmFupf/KD4L31W1L04GCUQxqdbFN2C+/SQ3UUU8GmwxpaIP2s3AlBcf
nSikIzH2dL+cfRuhb5aFHsqtAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUep7epfyI
L4Z+ujeIm807O7SsYjEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVCQkFGLzE5MUE2Mzg2MzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQkJBRi8xOTFBNjM4NjM2REQxMUYwOTY4NjIxNjZDNEY5QUUwMi9lcDdlcGZ5
SUw0Wi11amVJbTgwN083U3NZakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlkdMA0GCSqGSIb3DQEBCwUAA4IBAQAD/+RGwXYSqz8igHaSrqptvJzf
h/Yj1mpFidi30cFHeXevuyEXgoh9vT2oIsAQuCv4ocuR+ej3aAlTdC1CvF1OwODm
kdZpCUw8hxzyqBfIdgXPRxvQQ9APnwK5BtZMgy7dQoWrchen52TnqoLdMm3qXLEs
j2Ok5tTsL31Z1rGUGLRw92Gbty+TTU6iZAo3CCShHjTDtJks4JbodTRDbRs7GflQ
glYQIny1ZL7UxueDveIbXevtNcH68pKOmt51FDM01xVfYncJ9xpQonOhw0sig1L7
4wp9qEDTc9CT7ul/xlZji7hf55QtzPAEOuxP1ZQOfkYyoVg+hTPOHaWfSTsP
-----END CERTIFICATE-----
Generated at Fri May 30 08:50:25 2025 by rpki-client