Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
File:                     hseUaUaypXsFbwKyeTQNMMLOSbQ.cer (raw, json)
Hash identifier:          9ZSiYeKuwavsl5+skEV5NQamF4XKoYYHX5m/kOv62b0=
Subject key identifier:   86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B469
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 12:32:23 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 7540
                          AS: 9586
                          AS: 9828
                          AS: 10232
                          IP: 117.18.116.0/24
                          IP: 202.181.174.0 -- 202.181.176.255
                          IP: 202.181.189.0/24
                          IP: 202.181.192.0 -- 202.181.203.255
                          IP: 202.181.205.0 -- 202.181.215.255
                          IP: 202.181.225.0 -- 202.181.247.255
                          IP: 2405:5d00::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177257 (0x2b469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 13 12:32:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:90:3c:29:01:3e:22:86:ac:7d:86:d3:85:
                    a4:0a:fd:64:ad:52:1b:63:52:22:93:2b:84:0d:ee:
                    fb:5e:ee:9a:4a:44:6d:7f:69:0b:61:b1:66:48:bd:
                    88:69:56:2c:4d:61:4a:1c:1a:81:bc:61:0c:b6:f4:
                    c3:10:e9:e5:de:40:f3:bb:3d:66:37:34:2e:86:a3:
                    10:06:b6:a4:95:69:99:72:ab:69:76:62:ee:90:08:
                    10:e9:60:d7:c7:1c:51:8f:52:7c:f1:b6:76:b3:78:
                    f9:2b:12:3d:8a:d8:d6:2d:e1:3c:97:ed:07:7b:ca:
                    a4:59:6f:1a:85:ab:4d:21:90:9b:1a:05:e7:e1:82:
                    75:54:3f:d6:2d:11:9e:01:1b:73:b0:3b:87:90:8f:
                    6b:ce:28:f6:71:f1:ac:77:c1:05:b9:40:80:a6:de:
                    72:8b:fa:1f:15:13:10:50:40:72:3b:f0:cf:06:fe:
                    67:11:ed:db:e1:bf:9a:4b:c5:43:dc:05:ae:5a:27:
                    01:d0:c4:50:45:90:57:6e:be:7d:e9:1a:0d:9e:0b:
                    7c:ed:28:22:d1:ed:dc:5d:49:a7:6f:3b:c8:f1:63:
                    6e:6e:a9:54:73:6a:98:3b:7d:18:a8:54:41:c9:26:
                    b9:51:de:b0:14:f1:cc:33:bc:50:b3:bf:7f:f7:1e:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7540
                  9586
                  9828
                  10232

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.116.0/24
                  202.181.174.0-202.181.176.255
                  202.181.189.0/24
                  202.181.192.0-202.181.203.255
                  202.181.205.0-202.181.215.255
                  202.181.225.0-202.181.247.255
                IPv6:
                  2405:5d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:e5:be:fe:53:c0:42:6a:6a:a8:4a:75:0a:cd:be:6d:c5:56:
         88:94:af:17:c8:cc:12:59:38:f7:a6:61:8f:fa:70:f4:08:1e:
         7e:f6:63:36:89:dc:bf:70:0e:3b:a2:01:2a:3d:3a:47:d2:fa:
         38:eb:aa:1e:ab:42:46:d3:e4:00:f4:8c:e4:eb:72:43:51:dc:
         59:6f:db:7f:22:4d:c0:4f:64:ca:bf:a9:06:a6:1c:4a:01:7a:
         e0:95:b8:6c:77:13:1e:1a:9f:a6:70:b2:ce:9f:cc:7c:73:68:
         79:57:61:32:33:7d:4b:79:06:b3:d5:91:e9:d5:38:08:37:56:
         2e:6b:ec:8c:9b:4d:b2:3c:39:50:0e:33:86:81:0f:17:42:c6:
         1a:f7:22:24:38:3f:4e:b6:ab:23:a7:0f:2d:53:01:c6:e8:59:
         a1:e4:10:f7:8c:3a:bf:39:26:04:1c:b5:09:5d:90:37:be:a2:
         a8:90:b6:21:8f:f4:70:8b:cb:10:71:79:8f:fa:fc:ff:49:31:
         5c:33:70:c4:96:06:4d:d7:ed:d1:9c:f5:14:36:95:09:6c:24:
         42:55:68:40:f5:9e:ff:1a:48:ad:52:e6:1e:1a:4e:71:a0:4f:
         45:83:82:cc:93:c2:9c:97:1c:66:88:fa:a9:47:ea:31:74:ad:
         90:80:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:54 2026 by rpki-client