Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
File:                     rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer (raw, json)
Hash identifier:          rtE8tFXHKrQ1Oc+xTcLp4J2Iy+fPu8PlkaqBVET1SdQ=
Subject key identifier:   AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C3AA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Jul 2026 12:46:52 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 152913
                          IP: 2401:a660::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 15:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181162 (0x2c3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  8 12:46:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:51:ab:66:3f:eb:5f:cc:8d:4c:c3:bc:73:
                    8f:4b:6b:c4:e5:84:e2:7e:fb:5f:c3:e5:a2:c9:d2:
                    76:0e:97:c2:47:d2:6e:38:08:51:89:0e:38:18:ff:
                    2a:28:d4:4c:a0:23:04:ec:24:94:66:fa:fb:0d:b3:
                    2d:aa:c4:db:f7:54:a0:01:24:13:5a:93:49:81:ae:
                    ac:c7:67:ab:0c:54:e1:eb:5c:1c:19:47:fb:a8:57:
                    99:d4:48:9c:e0:97:95:fb:dc:0d:f3:30:39:38:48:
                    2b:0f:a4:cd:d7:93:54:1f:8d:21:d3:9b:a7:89:eb:
                    4f:ae:c8:33:7e:c5:ab:f6:d6:5c:24:82:d8:e8:24:
                    62:8e:b6:0e:23:dd:14:1c:58:82:ca:c3:6c:d8:09:
                    75:a1:d6:18:fe:16:0c:3f:99:c0:1f:7a:51:31:b6:
                    92:9b:5d:5f:c2:ce:5a:22:76:4a:3c:5f:18:c0:b1:
                    73:93:8f:ad:9a:2f:b6:90:ac:67:c3:9a:bb:a5:a7:
                    c3:2e:70:4a:a2:48:12:f9:d2:e4:7d:59:f2:cd:b9:
                    b2:41:6e:d1:05:15:c6:13:44:b0:36:2a:92:0c:56:
                    11:e8:88:d4:73:da:46:1f:b8:7c:cc:59:cb:88:40:
                    9c:ee:35:dc:70:9c:56:f4:25:87:d7:8a:6f:20:f1:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152913

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a660::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:76:5e:aa:ca:e7:0a:09:d9:72:34:95:66:33:18:f4:ec:27:
         be:91:fa:e9:d6:0b:56:bd:84:e3:ee:69:91:d5:36:17:2e:79:
         32:96:ff:47:ef:ec:c7:e1:77:11:c0:0e:05:58:c1:e9:23:3f:
         32:f4:e6:ca:08:37:f5:17:bc:d2:e7:d0:a4:76:1d:6e:70:ee:
         d1:ea:0c:79:67:ff:12:6b:68:a0:18:2b:cf:14:93:e9:95:18:
         c0:80:a8:50:84:db:b9:88:cc:d9:27:b1:55:cb:4c:57:d5:01:
         c7:0d:47:b4:ef:f0:7c:e4:56:e6:3b:0f:5f:62:07:0d:e4:fa:
         59:c6:67:14:66:9f:50:08:c2:11:f1:7a:24:36:e1:61:da:70:
         da:bc:91:49:f3:e1:ce:b8:0e:dc:a8:de:3f:f4:54:3b:a9:ce:
         a5:f7:4b:85:fc:94:60:14:77:6d:f3:f1:ae:30:6a:3c:d9:58:
         a0:c5:55:ee:b2:7a:59:e3:00:57:90:01:5e:04:4c:1a:bd:03:
         4d:93:28:c1:02:c8:6c:bc:c4:09:10:82:77:10:bc:0e:fe:7e:
         32:97:57:35:58:ad:cc:b6:af:1f:11:ab:7a:8a:3a:47:e2:c6:
         ad:b0:26:fb:01:f8:dd:b8:a4:25:47:94:89:c0:f2:6c:33:ad:
         76:58:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:46 2026 by rpki-client