Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
File:                     ntVkKdGun2AE-2-2eI6T-vYiV1k.cer (raw, json)
Hash identifier:          DfrpT+hH9sArT2aphU++Rt3pNVCJbPmZLxq3dAgj6VU=
Subject key identifier:   9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B70D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 May 2026 12:57:13 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 4841
                          AS: 9219
                          IP: 202.27.91.0/24
                          IP: 202.69.208.0/20
                          IP: 203.13.166.0/24
                          IP: 203.191.132.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177933 (0x2b70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 12:57:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:45:27:66:4d:5f:ae:29:8e:82:62:c5:bd:
                    c7:70:e0:7a:06:b3:65:1d:f7:2d:bd:fb:0e:33:4c:
                    db:28:2a:63:a4:a3:be:41:60:9b:ff:ae:ba:1a:bf:
                    05:b5:29:1b:0f:c3:58:8a:96:27:19:19:c5:47:a9:
                    18:14:0e:23:50:61:a7:12:f9:47:13:e5:c8:fc:a4:
                    7d:72:b9:ee:1b:03:de:fc:90:1f:18:5f:62:3b:38:
                    56:5d:8a:34:7c:35:91:89:6f:64:64:93:f2:2a:ac:
                    03:c5:f6:a4:6c:75:3b:03:d1:e8:46:97:52:7b:6c:
                    5d:d1:86:f4:43:c3:8e:5a:33:99:9b:6e:2e:ac:29:
                    32:f9:fb:15:9d:3e:24:94:38:25:84:48:5f:96:b4:
                    c7:43:2b:f3:9b:ee:82:a1:13:f5:fa:e4:5d:b6:05:
                    21:38:5e:63:cd:5b:e2:b4:df:be:77:a8:15:02:a3:
                    63:b9:36:79:e1:2f:a7:3c:c8:43:eb:71:d0:5f:ce:
                    e2:3a:19:cc:42:a0:c9:ca:05:c6:82:df:15:67:8b:
                    b2:82:b7:4c:d4:c5:60:70:de:26:a4:3d:33:6e:5f:
                    1e:6c:e2:00:c0:2c:92:2f:ce:ca:8f:a1:b1:5b:19:
                    3e:13:56:68:df:f7:ff:ef:5b:ce:02:04:ca:b0:b2:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4841
                  9219

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.91.0/24
                  202.69.208.0/20
                  203.13.166.0/24
                  203.191.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:93:19:a6:9c:79:aa:62:70:df:4d:53:e4:3f:f6:3f:54:01:
         67:09:9d:ba:0e:dd:ca:91:d5:1f:94:08:42:97:f5:78:b8:04:
         0d:e2:b3:22:ec:22:c6:d6:b8:fe:05:39:2e:92:cb:77:00:ba:
         46:4c:25:e0:b4:6e:74:af:29:e3:81:d0:35:4a:af:85:1f:6a:
         d4:cd:0e:c1:f0:ed:12:a4:8c:b4:76:a2:53:ec:60:00:c8:c3:
         98:d7:ff:ad:0f:2d:20:bb:52:fb:14:22:86:8b:d9:fa:0b:c0:
         4b:4e:2f:4f:cb:89:7f:57:31:38:73:16:f5:69:24:1b:66:4d:
         13:6c:ba:32:04:49:70:94:22:c1:4e:09:f6:e0:d3:87:ed:51:
         69:50:dd:1d:48:0b:52:6b:ab:9d:9a:03:0b:bf:3c:bb:72:23:
         23:0f:86:da:34:06:43:41:ad:a0:48:d8:ba:ec:c2:4e:79:91:
         b6:aa:85:cc:fc:9b:c3:c2:07:e9:4c:20:fb:b1:9f:da:d3:a8:
         b2:6c:ee:51:46:b3:41:97:e8:5e:cc:7a:07:73:02:43:f0:3e:
         26:a5:f6:27:ef:9b:cb:fa:c3:08:de:ea:32:e5:31:4d:c1:a4:
         47:e5:ed:76:71:61:7b:55:e6:b5:88:3d:53:21:b2:22:27:64:
         4f:96:d7:ff
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDArcNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyNjEyNTcxM1oXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDI3NjkxMTAvBgNVBAUTKDlFRDU2NDI5RDFBRTlGNjAwNEZCNkZC
Njc4OEU5M0ZBRjYyMjU3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0FEUnZk1frimOgmLFvcdw4HoGs2Ud9y29+w4zTNsoKmOko75BYJv/rroavwW1
KRsPw1iKlicZGcVHqRgUDiNQYacS+UcT5cj8pH1yue4bA978kB8YX2I7OFZdijR8
NZGJb2Rkk/IqrAPF9qRsdTsD0ehGl1J7bF3RhvRDw45aM5mbbi6sKTL5+xWdPiSU
OCWESF+WtMdDK/Ob7oKhE/X65F22BSE4XmPNW+K03753qBUCo2O5NnnhL6c8yEPr
cdBfzuI6GcxCoMnKBcaC3xVni7KCt0zUxWBw3iakPTNuXx5s4gDALJIvzsqPobFb
GT4TVmjf9//vW84CBMqwsqhDAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUntVkKdGu
n2AE+2+2eI6T+vYiV1kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyNzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0Mjc2OS80NkJENTVDMjRCOEQxMUYwQTNGNEZGM0ZDNEY5QUUwMi9udFZrS2RH
dW4yQUUtMi0yZUk2VC12WWlWMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHQYIKwYBBQUHAQgBAf8EDjAM
oAowCAICEukCAiQDMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAyhtbAwQE
ykXQAwQAyw2mAwQAy7+EMA0GCSqGSIb3DQEBCwUAA4IBAQDHkxmmnHmqYnDfTVPk
P/Y/VAFnCZ26Dt3KkdUflAhCl/V4uAQN4rMi7CLG1rj+BTkukst3ALpGTCXgtG50
rynjgdA1Sq+FH2rUzQ7B8O0SpIy0dqJT7GAAyMOY1/+tDy0gu1L7FCKGi9n6C8BL
Ti9Py4l/VzE4cxb1aSQbZk0TbLoyBElwlCLBTgn24NOH7VFpUN0dSAtSa6udmgML
vzy7ciMjD4baNAZDQa2gSNi67MJOeZG2qoXM/JvDwgfpTCD7sZ/a06iybO5RRrNB
l+hezHoHcwJD8D4mpfYn75vL+sMI3uoy5TFNwaRH5e12cWF7Vea1iD1TIbIiJ2RP
ltf/
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:51:32 2026 by rpki-client