Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
File:                     suPG96kEVKInRzewUsujXxn11aA.cer (raw, json)
Hash identifier:          +sFTGWkYptd8E8FV4CLfpARf4p85ThveuW8Ud/LdekI=
Subject key identifier:   B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A27F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Mar 2026 05:20:45 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 154516
                          IP: 2402:4e20::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172671 (0x2a27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  5 05:20:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:a5:59:f8:ad:51:25:27:26:8b:f8:26:89:
                    83:95:ca:57:10:8a:7e:f4:c7:08:c9:13:1a:1f:ed:
                    55:a9:ef:fc:d7:b5:60:24:03:6f:fb:48:a2:35:22:
                    92:fa:f1:1e:cd:c6:d4:48:52:c2:db:36:70:66:d9:
                    c8:e2:35:61:7c:7f:d1:62:4e:7a:b4:e2:09:0c:4f:
                    17:fa:75:05:55:fe:d3:1e:55:e7:5d:80:d0:7a:c1:
                    49:26:59:10:ea:6e:5a:8b:e7:7e:6f:12:69:c8:95:
                    0b:62:ae:a8:a8:01:61:bd:9e:59:be:a5:84:b5:71:
                    f0:c3:79:c0:11:fe:62:ee:25:46:c3:44:47:31:cf:
                    5f:8b:a7:2a:5f:20:52:19:f5:0b:11:ee:39:05:01:
                    dc:ad:f5:db:17:b1:bc:9b:7d:f8:76:b1:fa:21:4b:
                    a6:f0:57:e3:ff:16:2e:f9:60:f2:15:95:f9:4f:66:
                    7b:23:27:2a:55:a0:f3:53:da:a1:d0:f9:97:bc:a8:
                    03:ce:0c:15:81:99:50:1f:87:31:a9:3f:39:fa:bc:
                    9b:e7:73:4a:f4:35:ee:9b:00:b6:f8:8a:17:69:95:
                    5d:17:c9:f9:20:ac:7d:47:80:d8:90:24:c5:23:dc:
                    e7:d7:54:03:b4:32:05:ed:ac:47:48:33:3d:ad:61:
                    53:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154516

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:99:c1:e8:64:57:97:0d:eb:86:f3:1e:af:a0:a7:f5:ef:
         60:0e:c9:07:3f:1f:30:aa:c1:7c:26:80:46:56:c9:ab:80:93:
         1e:9a:65:49:62:af:91:37:08:45:40:b2:8d:18:98:f9:02:a7:
         d8:7e:12:5e:8f:44:02:5c:82:86:14:57:c1:f8:1c:cb:2b:62:
         a3:d0:54:43:70:a0:fd:86:32:44:6c:5f:f8:68:b1:c3:96:5f:
         38:bc:52:79:55:8e:d7:3f:56:cf:ed:ee:3d:e7:ac:b3:b8:9c:
         20:34:29:85:76:f3:1c:eb:5d:51:ba:8a:97:d8:b6:d4:41:e3:
         bf:5c:87:82:4e:2d:a8:84:9b:9a:34:60:ef:b4:e4:45:80:63:
         ef:ad:54:37:9d:de:66:8a:24:e2:6b:93:a4:80:0a:3b:e2:ee:
         aa:9f:3a:1f:72:73:92:a2:b5:25:e3:f7:44:18:ac:9b:b3:53:
         a4:ce:27:35:3c:b9:16:80:32:12:00:7d:e8:59:05:8b:dd:72:
         43:67:57:09:d2:9a:c4:1c:3c:39:55:2b:d3:8f:fe:dc:c8:12:
         7b:4e:2d:eb:cf:cf:68:66:2f:fe:79:b8:16:ad:ec:b0:4b:2a:
         bf:2d:84:d4:4e:b5:49:dd:09:a7:6c:fb:8e:f4:ff:95:47:c4:
         5b:28:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:13:35 2026 by rpki-client