Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
File:                     0X13ywyJuZTN2suidScKHnTcqic.cer (raw, json)
Hash identifier:          xKEJdDYT9OnC/EDtrG/ixV1rYvf4CpdkisJMJr8SDHI=
Subject key identifier:   D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A244
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 04 Mar 2026 13:12:38 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 17660
                          AS: 18024 -- 18025
                          AS: 18205
                          IP: 45.64.248.0/22
                          IP: 103.245.240.0/22
                          IP: 119.2.96.0/19
                          IP: 202.144.128.0/19
                          IP: 2405:d000::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172612 (0x2a244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  4 13:12:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:1a:63:89:e3:5d:ab:70:c6:50:a0:d4:cd:
                    39:20:b3:ed:fb:93:15:78:1e:3e:68:49:7b:aa:69:
                    60:58:47:f8:62:99:2e:1a:d1:24:50:cf:0f:33:93:
                    ad:0f:2e:64:79:ed:06:85:e0:d2:7d:7c:bf:4c:5a:
                    81:ca:ca:b2:b7:0b:46:d7:d9:d2:77:7f:cd:98:55:
                    53:db:c7:5f:1d:3a:09:e3:eb:47:bf:2d:6b:b7:62:
                    80:fb:ae:b8:53:4b:a9:9e:59:25:4e:1c:24:ab:85:
                    da:ec:fd:41:61:8e:37:dd:03:e4:a7:9a:57:42:74:
                    d8:ad:83:0c:fe:78:5d:af:b2:b3:57:f4:dd:1b:c7:
                    79:27:ce:99:f6:62:93:43:d2:09:84:12:15:20:ad:
                    e5:a6:e7:6e:09:c4:6b:be:a5:15:ca:f6:66:42:1e:
                    ac:4d:a1:af:94:6f:e8:ec:6b:a4:5a:86:0c:d2:58:
                    da:77:45:aa:07:ea:a6:79:02:e4:32:af:bc:75:23:
                    7a:62:24:49:4d:63:e2:69:4d:0b:f0:d2:9b:14:6b:
                    73:7b:cd:09:7b:ab:4f:05:52:2a:a8:45:cf:d4:9f:
                    9b:66:3f:45:bf:6f:33:9c:f4:47:11:e5:1b:5c:33:
                    37:cc:a0:cf:7a:22:0d:9e:4c:b1:e9:41:59:1d:80:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17660
                  18024-18025
                  18205

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.248.0/22
                  103.245.240.0/22
                  119.2.96.0/19
                  202.144.128.0/19
                IPv6:
                  2405:d000::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6c:2e:0e:3d:70:2b:61:8c:f5:9c:44:6c:19:87:05:8d:35:
         bd:91:a6:12:e8:91:60:b3:6b:3c:d5:3f:28:a3:37:6b:30:28:
         d3:70:fc:45:69:2d:56:bb:65:68:24:21:13:35:a8:1c:6e:fd:
         3b:3e:6c:0b:0c:b3:8d:85:2e:5f:c2:91:68:32:01:ed:22:9d:
         bb:d1:98:81:72:d9:e8:84:d5:63:b0:e1:28:a5:11:58:35:ea:
         aa:a1:c2:60:f7:e8:6c:9b:f0:b3:f7:b2:75:e9:76:b5:13:75:
         4e:5d:b9:db:4d:69:c1:56:a0:89:72:ac:aa:21:ed:2f:91:0a:
         e5:ca:41:48:e9:4d:32:85:b1:b6:cf:85:63:f4:a4:b1:9f:65:
         19:06:ca:54:e8:9a:de:55:fe:ec:7c:62:ba:64:00:8c:3d:59:
         fd:db:ab:e6:59:e0:5a:de:2c:38:06:10:91:c2:29:0d:3c:84:
         98:e0:ec:67:4b:31:47:a0:03:f0:bc:fe:36:40:d2:20:71:37:
         1c:ae:60:3a:24:12:e8:33:57:82:a0:d7:84:01:db:ab:41:4b:
         ea:f3:76:c6:f8:ba:aa:4e:d6:96:5a:9b:02:9c:d0:b0:56:fb:
         70:ef:7c:5c:ec:d8:cb:a5:d7:1c:83:d3:9c:6d:c5:11:52:67:
         cc:ec:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:06 2026 by rpki-client