Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer
File:                     pbtkBP5TtawGtBCz1s2gNKITHpA.cer (raw, json)
Hash identifier:          etBA5V1fZE5aJ4Fd4TFavGf7fxQvaTxa6304z4b+BMs=
Subject key identifier:   A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CB49
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 13:30:58 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 136809
                          AS: 153947
                          IP: 2001:df5:aec0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183113 (0x2cb49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 13:30:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A915DE6C, serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:85:33:62:d0:17:57:fc:f8:4b:cd:ac:e5:eb:
                    2d:78:56:c5:c4:d2:38:f4:6c:3e:e0:64:2f:f6:dc:
                    bf:9a:fb:b5:9c:7f:87:0f:69:31:c2:2a:83:4c:cf:
                    e9:0d:65:be:0f:56:22:1e:72:93:99:d0:d1:ab:87:
                    c3:5d:a3:f6:07:54:61:9b:d3:fb:e4:da:c3:9c:55:
                    e0:f5:89:b3:fe:19:f3:87:1b:4c:be:e6:ac:a0:ce:
                    a2:d4:88:0a:fe:95:1c:37:60:41:f5:f7:98:5f:66:
                    a2:0e:3f:3c:57:3a:23:df:fd:c6:77:b8:e3:b1:8a:
                    18:e9:7e:74:6a:0a:31:f1:ab:9d:d0:47:4a:a7:24:
                    1f:1d:bf:05:1f:4e:30:a0:48:79:c3:33:12:e2:c6:
                    69:01:86:a4:71:2a:9b:34:b8:0e:18:89:6b:89:ee:
                    1e:2c:93:58:5e:53:18:fe:c1:00:c4:bb:1d:4f:09:
                    7f:d3:d2:3b:53:4a:fd:a5:0a:a4:ab:f8:ef:84:2b:
                    4b:1d:eb:e2:2e:cb:9f:39:97:85:d1:90:ae:eb:98:
                    18:e0:04:cd:68:15:5d:3d:20:3d:d3:63:85:b0:11:
                    eb:a4:ad:ae:52:44:33:87:31:c9:f1:32:c9:0d:8b:
                    43:e8:e9:4a:a1:bd:83:6b:5f:df:69:3e:45:82:ef:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136809
                  153947

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:aec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:4f:17:af:65:c6:d2:52:e6:33:b0:3a:c6:ff:32:cf:b6:
         ab:d2:23:b2:a4:67:3e:f9:8e:b4:e6:21:8c:f1:7c:68:1a:e0:
         44:25:96:d2:5c:c1:b0:73:1d:11:df:0f:ef:01:a2:bc:62:3a:
         9e:18:fa:54:f0:9f:10:fa:0c:e3:f9:af:ad:eb:f5:35:f5:2f:
         cd:89:93:70:0b:47:87:c0:81:4a:93:d1:ce:4a:f9:4b:04:1a:
         35:50:1b:dc:6e:33:e1:a7:76:a4:f8:11:da:0a:be:78:ca:0a:
         e9:f8:0d:02:cf:a0:f1:9b:d4:00:0c:0d:6b:ee:55:03:da:4f:
         47:62:a0:89:ff:ec:5f:65:ab:32:f5:03:09:40:2f:b3:3e:8c:
         5f:f6:f9:81:3a:f1:a0:77:32:51:df:45:5b:d3:18:87:dc:69:
         98:c4:86:78:32:42:c2:ed:e4:23:99:88:36:a3:8c:3c:76:0d:
         25:06:ab:e1:db:f5:ff:36:41:82:45:23:51:65:99:e8:19:f0:
         93:15:00:09:58:e5:a0:54:14:6c:9e:d7:e5:73:d9:bf:62:b5:
         82:1b:25:3a:a1:b2:ae:21:d6:d2:1d:dd:95:67:7e:d6:31:ba:
         04:b9:db:ce:39:f6:e3:cc:5f:12:8c:44:fa:30:b0:40:4d:73:
         2e:35:cf:94
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIDAstJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgwNTEzMzA1OFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNURFNkMxMTAvBgNVBAUTKEE1QkI2NDA0RkU1M0I1QUMwNkI0MTBC
M0Q2Q0RBMDM0QTIxMzFFOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxhTNi0BdX/PhLzazl6y14VsXE0jj0bD7gZC/23L+a+7Wcf4cPaTHCKoNMz+kN
Zb4PViIecpOZ0NGrh8Ndo/YHVGGb0/vk2sOcVeD1ibP+GfOHG0y+5qygzqLUiAr+
lRw3YEH195hfZqIOPzxXOiPf/cZ3uOOxihjpfnRqCjHxq53QR0qnJB8dvwUfTjCg
SHnDMxLixmkBhqRxKps0uA4YiWuJ7h4sk1heUxj+wQDEux1PCX/T0jtTSv2lCqSr
+O+EK0sd6+Iuy585l4XRkK7rmBjgBM1oFV09ID3TY4WwEeukra5SRDOHMcnxMskN
i0Po6UqhvYNrX99pPkWC748PAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUpbtkBP5T
tawGtBCz1s2gNKITHpAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVERTZDLzc0RkJCM0Q2NDNENDExRjA5MEI0NzY2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1REU2Qy83NEZCQjNENjQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9wYnRrQlA1
VHRhd0d0QkN6MXMyZ05LSVRIcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhZpAgMCWVswIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ31
rsAwDQYJKoZIhvcNAQELBQADggEBAIFvTxevZcbSUuYzsDrG/zLPtqvSI7KkZz75
jrTmIYzxfGga4EQlltJcwbBzHRHfD+8BorxiOp4Y+lTwnxD6DOP5r63r9TX1L82J
k3ALR4fAgUqT0c5K+UsEGjVQG9xuM+GndqT4EdoKvnjKCun4DQLPoPGb1AAMDWvu
VQPaT0dioIn/7F9lqzL1AwlAL7M+jF/2+YE68aB3MlHfRVvTGIfcaZjEhngyQsLt
5COZiDajjDx2DSUGq+Hb9f82QYJFI1FlmegZ8JMVAAlY5aBUFGye1+Vz2b9itYIb
JTqhsq4h1tId3ZVnftYxugS528459uPMXxKMRPowsEBNcy41z5Q=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:49:18 2026 by rpki-client