Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
File:                     28EoRfH6o1sy_s32oO1NFEKSyMw.cer (raw, json)
Hash identifier:          KrHnG951W2csLPVqpdX+/3xRMqkj9lYNKA6lHowMCew=
Subject key identifier:   DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B0A5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Apr 2026 12:46:00 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153698
                          IP: 163.223.140.0/23
                          IP: 2001:df5:41c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176293 (0x2b0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 30 12:46:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:8a:88:9a:8b:89:fe:30:41:98:85:c7:6c:
                    5e:96:22:37:e4:88:bd:e4:64:81:9f:5a:5a:06:6a:
                    cf:17:d3:dc:8f:a1:fc:77:8e:71:99:46:cb:e4:d3:
                    cd:6d:ca:23:09:4b:0f:35:24:0f:da:d8:d0:5b:9f:
                    3a:da:bb:19:e6:25:d6:7d:75:3b:a2:86:76:4f:8b:
                    cc:0d:05:d3:45:48:99:5d:4b:e4:47:9b:e1:be:87:
                    9e:b2:f0:ee:87:d5:7e:31:a9:7a:b9:51:e2:ae:61:
                    49:e5:f1:5f:4e:8e:91:fe:d1:c5:51:07:95:8a:3c:
                    b4:90:8d:3e:4c:fb:02:3c:4a:1b:28:67:a7:2f:2d:
                    2a:67:63:ae:0c:64:35:90:4a:e0:7c:c5:67:d7:ff:
                    f3:4b:64:77:9a:a8:6b:ec:04:1d:74:56:6c:58:9e:
                    3d:3c:15:b0:ee:5e:25:6c:2d:c7:b1:19:fb:38:21:
                    9e:10:1a:7c:73:34:76:df:d1:76:c6:8f:d7:b9:2b:
                    a0:01:42:ae:99:38:ad:83:80:37:4f:d5:95:37:e3:
                    8b:6d:19:91:c0:d4:98:c3:28:07:33:eb:9d:b2:4c:
                    6d:72:c5:7e:cb:f5:3c:90:e8:fd:8a:8e:53:16:33:
                    9c:95:e2:9b:34:de:71:88:5b:55:56:7c:a1:64:42:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153698

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.140.0/23
                IPv6:
                  2001:df5:41c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:5d:15:73:f6:84:a4:a0:04:e2:14:5b:b0:9c:2e:05:f1:
         c7:d5:d6:d8:1e:cf:29:de:64:ff:92:4a:ab:4b:24:09:f0:da:
         a0:0d:74:95:f9:d2:09:82:3e:b9:f8:d0:ac:c7:e3:01:52:ac:
         7a:18:ce:b3:d5:36:3e:51:db:18:13:8d:b7:4b:80:9e:93:e5:
         5b:40:06:56:5e:80:69:03:7a:97:3a:26:48:71:ea:32:ed:4c:
         04:31:58:e4:f8:fb:71:1d:c7:04:ce:26:dc:95:9e:08:01:3b:
         fa:64:8c:31:4c:c5:dd:58:c0:8d:f8:71:83:4c:72:ac:dd:25:
         2b:83:09:c5:16:15:2f:83:5b:60:0e:15:9e:0c:69:c4:aa:9c:
         45:a3:bd:7b:b9:64:ca:5f:7d:44:12:e1:e2:13:18:9b:cf:dd:
         4a:de:7f:d1:bb:69:83:44:4f:0f:c4:77:db:47:26:61:61:e8:
         49:17:b2:82:73:9a:b8:3c:2c:47:02:29:e6:4c:b1:c7:36:3f:
         25:f6:05:cb:7d:d2:cc:3a:3a:b8:87:e3:f8:73:30:af:92:dd:
         8e:5e:59:37:47:63:e8:9d:d7:76:89:27:2c:5e:3d:70:67:2a:
         71:e2:4f:18:9b:71:f1:8f:dd:03:a4:13:c2:f0:4a:67:03:a5:
         3e:7c:9c:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:30 2026 by rpki-client