Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
File:                     6T3f_jtOr4gfKaEnoibdo7SaD_I.cer (raw, json)
Hash identifier:          vm21xczi7rAHL1nCnMaydKZJXTzEh6DImagZhEFxQWw=
Subject key identifier:   E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02E453
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point:   rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Nov 2026 04:03:33 +0000
Certificate not after:    Wed 01 Mar 2028 00:00:00 +0000
Subordinate resources:    AS: 155078
                          IP: 202.50.60.0/23
                          IP: 2001:df7:cdc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189523 (0x2e453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  3 04:03:33 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=A91AA7E7, serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:e5:ef:3a:33:6a:12:03:f9:c9:78:e6:f1:
                    03:e7:07:f8:da:f9:df:7b:c3:ed:5d:4a:af:f5:a5:
                    42:9c:ab:01:ed:5c:6d:e8:57:d4:b3:84:f6:ea:ef:
                    5c:19:56:2b:94:d6:b2:10:f5:b3:1c:21:bd:9a:d3:
                    e7:42:fd:58:a6:c2:7f:f8:fd:61:74:bc:27:89:7f:
                    3e:c3:5e:50:a1:8c:af:ea:f7:56:a4:f7:33:5a:78:
                    85:1a:b9:78:9c:31:12:42:91:2f:96:b9:90:91:16:
                    32:f2:5c:b5:7b:9e:6e:9f:a9:e6:71:9a:6c:f2:fc:
                    9c:94:0f:6b:33:4e:fa:69:16:d0:d7:af:85:0a:ee:
                    66:ea:bb:7d:43:3c:d4:d7:5f:da:87:0a:d2:39:9f:
                    4d:b4:1b:6c:eb:19:de:69:37:ff:70:2e:e2:38:eb:
                    33:8b:73:52:84:3d:30:ff:68:fb:03:78:d4:b1:c2:
                    7b:ff:bb:c4:31:0a:e6:34:d0:88:c6:50:da:18:51:
                    0a:01:65:2d:d7:22:9d:b8:53:10:c7:74:4a:2e:16:
                    8b:0b:d4:69:71:7c:bb:48:aa:04:44:30:10:3b:30:
                    f5:c6:d3:22:28:41:a0:dc:51:2f:05:9e:f0:ed:c8:
                    8f:65:73:90:c7:a1:16:ad:6a:3d:06:79:be:94:56:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  155078

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.60.0/23
                IPv6:
                  2001:df7:cdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:0e:d5:3d:fb:16:00:2e:3d:d7:cb:ff:04:ca:35:7e:a5:
         86:cf:d2:04:7c:30:d4:96:09:1c:84:a6:9e:64:58:49:e0:1f:
         d2:9d:22:e1:dc:f0:5f:83:9b:05:16:08:16:ac:bf:ee:25:5a:
         e0:5d:19:a5:dd:66:7b:e5:60:d8:36:e9:4a:dc:17:7b:11:77:
         44:a3:5d:7d:f6:e4:f1:ef:0d:b0:08:11:7a:25:b7:c8:14:5b:
         39:99:b2:2a:22:23:0f:70:46:d7:f5:d1:9e:44:2a:cf:45:06:
         af:f2:3d:ca:c3:54:19:3e:df:d8:ab:09:a7:9d:fe:0c:d2:cd:
         b1:19:17:d8:d9:eb:4e:c1:fe:e8:ae:9d:15:28:58:36:c4:45:
         5c:a6:c2:e3:45:26:1b:67:47:19:b0:ae:25:85:c6:44:b0:d6:
         8e:e0:cd:27:4b:1f:06:13:9a:ea:3a:08:d7:aa:4d:c5:2f:c9:
         5c:7e:43:4c:16:05:6f:04:64:67:b5:ab:ad:cc:4f:ff:7d:35:
         1a:c6:a6:e1:d1:b8:c4:1f:06:89:2a:2e:6b:8c:e3:d4:71:72:
         19:44:c1:c0:65:a9:94:c5:10:d3:56:59:7d:56:00:08:24:7e:
         71:99:22:18:b0:50:c2:16:f0:36:ae:cf:73:ff:1e:d6:bf:10:
         76:5b:34:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:39 2026 by rpki-client