Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
File:                     vDUKYanj3h4eWJC-0L6KhxJP3LE.cer (raw, json)
Hash identifier:          TF+hnj3xyoNDsqX755+6E+vIs5hR37wpEDyA6gvk5XU=
Subject key identifier:   BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B5CD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 May 2026 12:23:25 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 154685
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177613 (0x2b5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 20 12:23:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:fd:17:a5:92:78:c8:c7:21:e5:a2:97:40:
                    d6:2f:c9:b8:5e:36:39:49:b6:80:b9:c0:88:f4:55:
                    ea:08:a4:bb:e7:44:09:47:41:87:ad:3d:59:f7:77:
                    54:aa:fb:7c:5c:bb:4e:cb:85:10:6f:2f:b6:48:f7:
                    d1:5c:1d:14:9a:ef:0b:b1:57:be:7d:aa:59:84:6c:
                    c0:3e:d9:27:1f:2b:9d:89:13:59:4a:de:4b:33:44:
                    4e:03:ff:d7:8b:ac:36:fd:b6:68:83:1d:fc:5b:36:
                    0b:61:74:82:22:7a:77:4e:62:e2:92:66:0f:8b:fb:
                    c0:d5:aa:00:6f:dd:b4:c4:90:5f:06:15:62:8d:01:
                    dd:99:47:b0:61:61:dc:b5:35:86:3f:91:bc:20:af:
                    e9:58:d1:19:09:ad:99:b2:26:bb:6e:e3:67:fc:bb:
                    3b:ca:f3:75:f4:90:b9:07:b3:2c:59:87:ac:51:a5:
                    8f:3f:ab:aa:76:92:e3:f8:e9:8e:f8:cc:bb:4b:24:
                    b1:1d:0f:4c:47:92:9a:89:b6:ea:11:35:48:f4:cf:
                    a2:fa:06:10:1b:3f:77:46:56:cf:b8:f9:99:bc:9f:
                    fd:fd:03:98:51:b9:52:c6:36:92:20:61:d4:0d:ba:
                    27:21:8c:25:83:25:ca:5f:32:71:ff:3f:d2:ea:d3:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154685

    Signature Algorithm: sha256WithRSAEncryption
         d1:a3:b5:34:6e:92:93:78:64:0d:0a:5f:79:70:e8:8f:50:9b:
         95:90:be:26:57:a5:1e:41:99:ed:34:e1:c1:ab:c0:cd:fc:82:
         b8:4b:48:0d:c0:73:b8:29:a3:31:2c:d3:61:9e:d5:83:84:8c:
         3e:da:56:92:ef:7c:84:0e:9a:f8:d1:66:f9:fd:36:c8:ba:87:
         ab:38:80:cd:62:7b:cd:e5:2a:7a:be:5c:6e:fb:2b:b9:ae:bd:
         f0:bc:37:ee:b6:bc:96:49:d6:6c:36:d0:1b:7a:4b:09:98:26:
         cd:ef:b1:98:29:a6:b9:4d:00:3d:76:db:52:0a:a7:8f:e7:6a:
         96:89:24:5b:43:84:ee:48:1c:18:97:04:10:ed:aa:dd:a0:7b:
         34:f2:28:af:b7:17:3f:4a:c8:dd:0d:92:ad:9d:db:03:11:40:
         9b:05:e5:8f:32:f3:e1:48:87:85:3e:9a:51:67:e5:89:ad:9f:
         dc:cb:14:1d:b2:1c:2a:3b:1e:3e:77:15:2c:0c:ba:f3:a3:a9:
         75:1b:dc:f1:18:04:f1:ab:cd:1f:56:f0:8d:f1:a1:b3:f6:46:
         84:77:31:7b:fe:76:9a:13:0c:52:52:f2:6b:f7:2b:c0:83:12:
         7e:66:f8:ba:67:9d:cd:e3:3d:64:00:d8:73:f6:96:2c:64:11:
         f8:a7:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:47 2026 by rpki-client