Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
File:                     5GuTGFhaweBs84Ti7swh9HQzibs.cer (raw, json)
Hash identifier:          52knQ+RE5yl2mTxIpwFIIrJ2WU/bXflPjs8rMevjoqM=
Subject key identifier:   E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AFDA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Apr 2026 15:04:41 +0000
Certificate not after:    Fri 28 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 140098
                          IP: 163.61.216.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176090 (0x2afda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 15:04:41 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:fb:77:f0:1b:7f:07:bf:0b:5e:fa:37:d8:
                    9b:cc:b7:3f:ce:99:14:bb:1c:83:ce:4f:69:62:05:
                    7d:a8:71:61:fe:ef:c2:9c:bf:a8:29:aa:a0:d5:70:
                    4b:8b:45:5c:af:19:29:af:51:0e:5e:32:6d:33:02:
                    a2:dc:9e:5b:e3:54:35:6c:a5:a3:21:d6:09:cd:4f:
                    4e:a9:0c:f2:cb:16:3a:57:a3:67:23:49:81:77:94:
                    8d:24:12:15:9b:87:dc:97:49:75:5d:f9:03:3b:d1:
                    fb:80:8a:02:57:3d:17:3d:30:a7:e4:b2:b9:98:32:
                    1c:96:40:85:e7:08:ba:1b:9c:1d:8d:a7:f5:73:35:
                    77:f9:96:16:80:4d:ae:30:21:d4:c7:2e:c1:03:e4:
                    75:ca:1e:90:88:c3:5b:dc:72:1f:12:d7:16:b6:82:
                    a3:26:08:9e:3d:9f:c7:9a:52:34:04:d6:cc:f4:af:
                    28:37:06:b4:ad:ae:90:3e:93:a5:89:fc:fc:d0:09:
                    27:6a:c5:f5:fe:f0:a2:4d:5d:cc:5e:6c:8f:df:75:
                    1e:60:65:5a:df:c9:d7:0a:27:e9:b4:fb:82:ba:37:
                    eb:aa:82:a8:a4:01:df:8d:9a:80:3b:d4:7a:c5:e5:
                    5e:83:1a:60:c5:9a:b8:71:4a:50:d2:48:a5:22:7d:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140098

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:94:3f:5a:32:c9:e4:50:8c:86:49:46:ba:35:fe:cb:5d:
         ad:81:e9:23:c3:2c:bd:9c:20:40:5e:9e:40:35:e8:a0:76:aa:
         da:cd:4a:f9:6a:7d:51:79:07:23:2e:bb:d6:62:0e:70:8e:c5:
         db:0c:46:82:61:54:d5:5e:a4:e5:5b:26:29:40:74:82:05:a4:
         2c:62:73:49:4e:11:5d:bf:18:2e:76:87:f9:83:8e:61:44:c9:
         61:f1:d9:fd:06:1d:b9:26:94:01:3c:fe:ec:bd:10:66:0d:5f:
         ba:d6:de:38:a2:ce:8d:f5:ab:8e:89:61:45:9b:b1:49:be:3f:
         d3:6b:db:31:65:a5:bc:34:df:69:b8:be:b1:b7:41:b9:77:25:
         51:83:f3:29:72:64:62:25:92:f6:7b:db:55:0d:2f:9e:7d:8b:
         43:b6:3b:a8:37:36:19:1a:2a:af:86:97:4e:50:06:1d:b8:29:
         38:8a:97:5a:b2:f3:bf:f3:59:15:0c:25:cc:89:0c:f8:a7:7d:
         7a:8d:a2:8d:96:bc:bd:ce:bc:4c:97:74:73:dc:dd:f0:c7:77:
         da:e2:84:a3:81:24:eb:39:1d:d4:4b:30:d9:60:7f:87:32:c8:
         cb:1c:12:88:81:a3:21:9b:c9:5a:9d:dd:ea:30:cd:7a:98:3a:
         d4:dd:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:59 2026 by rpki-client