Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
File:                     zk5vKarqdsaUOXp2Em3DgNPbb74.cer (raw, json)
Hash identifier:          9IXUSD7kapQnPJaMKBy1MU5Nw2qFDRLAm7tHTZ/hIkI=
Subject key identifier:   CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C8A0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jul 2026 12:21:02 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 10025
                          IP: 202.59.4.0/22
                          IP: 2001:df0:8c::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182432 (0x2c8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 30 12:21:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:a7:07:7d:9c:9a:df:69:80:92:65:6a:cc:
                    ec:b3:ce:8e:d7:eb:10:ab:a5:63:95:47:ae:5b:22:
                    3a:18:e1:08:08:29:98:64:7e:56:7e:59:6d:f5:83:
                    84:cb:c9:c3:e1:8c:1f:bb:c4:2b:f4:c2:cc:54:d4:
                    e7:9c:85:41:3f:3c:8c:db:18:e3:f9:ef:ab:73:1b:
                    83:c3:4f:6d:7d:e8:7f:a7:2b:06:45:15:42:8c:34:
                    a4:3f:bf:76:0b:5a:4a:73:71:e3:8f:8c:b5:96:7a:
                    74:98:8e:a2:26:fe:13:69:2d:a2:f9:f5:9f:42:37:
                    75:8b:84:57:64:a4:53:a3:b1:8b:f7:67:b4:f6:95:
                    c3:b2:9d:19:1f:99:64:4a:97:f2:7d:97:4d:4e:c7:
                    dc:2b:26:8a:c0:88:2b:51:a0:99:87:cd:e7:44:ec:
                    c8:cd:41:06:c2:8d:9c:a1:09:0a:25:77:f3:2f:1c:
                    f2:fa:cc:ef:1b:0a:26:81:93:24:63:90:9c:cd:9c:
                    2c:b9:2f:c7:50:9e:1c:7f:15:35:c5:09:81:ee:65:
                    d6:8a:28:21:23:63:46:74:c0:8e:c1:d2:c1:46:0c:
                    42:dc:99:e2:a0:04:d6:01:54:62:76:10:e9:5d:e9:
                    65:3b:f3:cf:a1:db:56:8b:70:c1:03:7c:eb:b5:a3:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10025

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.4.0/22
                IPv6:
                  2001:df0:8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:b1:4e:47:78:0d:f6:f0:ea:f4:33:6f:c3:53:6e:c8:d5:2e:
         77:e9:c6:9a:1a:dd:06:74:d1:ac:34:fa:2b:bd:92:cd:26:af:
         07:4b:69:3d:4f:4e:bc:31:0b:52:46:46:2d:e3:f9:c1:2b:72:
         75:84:ee:24:bd:a5:d8:53:20:c0:81:a4:60:47:2e:97:c9:51:
         10:aa:88:49:7e:db:da:fe:80:33:6f:05:0c:86:cc:4f:25:f5:
         c9:fd:4c:65:b1:bc:24:6a:3c:4f:df:ff:d4:c0:01:09:ed:e3:
         93:14:e8:cf:f3:8f:a5:60:17:d8:c2:97:f9:cb:5c:90:02:cd:
         9f:a0:b2:9a:04:bf:3e:7d:c9:3c:ee:ad:e2:95:7c:4d:d4:a3:
         b2:65:8a:2a:49:43:39:56:88:8a:c7:4d:a8:34:02:9a:20:62:
         c5:96:c5:3a:d3:c8:84:d5:2e:db:23:85:43:18:b5:4d:75:0a:
         6a:0e:4d:5b:0d:f6:d6:68:e8:d3:9b:f5:b4:7a:7e:cb:ec:92:
         70:cb:45:62:c1:d2:7f:0d:4c:8c:19:ee:d9:40:e4:e5:d2:3a:
         9e:82:91:f1:e6:40:b6:9a:ec:c1:25:08:e5:39:9a:58:3a:96:
         a0:b2:a3:d1:f3:2a:be:80:fb:8b:59:a3:37:2d:8a:dc:a7:6c:
         67:80:cc:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:19 2026 by rpki-client