Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
File:                     6qgUe81-WERO-2P8KsfVqRy_oCE.cer (raw, json)
Hash identifier:          E9PRK/X/d8aBMLpheBhzpiRVoSFUEFKm0P/v68t17Bg=
Subject key identifier:   EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B19A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 02 May 2026 14:25:50 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153855
                          IP: 163.227.244.0/23
                          IP: 2402:760::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176538 (0x2b19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  2 14:25:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:d7:9e:56:fd:de:61:0f:88:62:f6:4c:88:
                    97:c6:63:ea:4a:f3:89:bc:0d:29:db:cf:a9:63:43:
                    83:0c:3f:0f:39:fe:20:87:0b:f3:04:d9:49:6d:f2:
                    29:3b:56:38:34:2c:41:00:e1:7e:b2:b8:fa:ec:38:
                    5a:55:ef:0f:27:8b:8c:47:60:fd:fd:ab:38:65:47:
                    cb:0e:9e:07:d8:0b:1e:18:30:85:db:d8:eb:4d:33:
                    8e:b6:50:61:4a:c8:c7:9a:ce:89:11:db:3d:a5:15:
                    45:86:97:ae:a3:2e:fa:49:97:21:83:c9:4f:50:ac:
                    74:25:6b:9e:f2:a6:c6:a5:fc:6b:68:a1:c2:7a:53:
                    bf:75:48:4a:81:3f:d0:3b:b0:52:71:a2:95:f0:31:
                    ab:43:de:3f:f8:85:92:18:4f:84:47:01:3f:e7:28:
                    22:7b:87:81:a2:a9:60:60:05:3a:23:c8:8d:bd:2c:
                    9d:a5:c9:b0:ce:ab:f7:5f:d1:a0:4f:a8:90:86:97:
                    02:cc:43:15:3c:2e:b6:11:fe:ac:45:f4:95:c3:22:
                    84:26:5b:26:e6:b9:84:24:04:84:12:a9:29:57:84:
                    aa:b9:8f:37:a5:35:c4:4f:07:22:8b:e9:f9:f7:da:
                    9f:3e:75:09:70:85:d6:c7:dc:81:96:62:53:e2:55:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153855

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.244.0/23
                IPv6:
                  2402:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:5e:6b:0d:84:f2:7f:af:89:80:cc:57:f3:a2:41:8a:5d:
         56:66:ca:1d:0a:0e:6d:cc:56:fc:fa:5b:09:a4:35:7e:ab:1c:
         61:65:fd:8e:d0:ff:d8:c4:b7:11:21:37:77:f5:f0:f3:ca:49:
         36:e0:66:df:f7:b3:8c:2d:0e:f6:9b:42:4f:ca:b3:7c:db:ac:
         d5:63:b6:07:b0:3f:cf:a8:b7:9b:8a:d9:4c:ef:05:25:6f:be:
         d8:c2:ad:43:ed:ac:3e:a2:c5:8c:43:55:50:7b:c0:ff:7a:2a:
         14:c3:bd:b3:3f:0d:1d:de:83:8f:b0:33:57:54:f7:1d:7e:c8:
         da:73:87:fe:f8:b9:8a:42:7c:be:ed:66:66:48:a9:26:7d:85:
         90:fe:25:a8:3a:96:8e:3a:19:01:86:8d:61:bd:07:f2:be:64:
         1a:a3:3f:91:18:6c:f3:1b:d5:27:dd:60:8c:12:04:84:3b:72:
         fb:18:62:d4:d4:a5:c6:98:12:70:a9:6c:26:36:bd:cf:0e:df:
         ab:36:a0:49:a7:18:d4:12:2d:a5:61:7b:40:e3:3c:da:22:f4:
         ab:4c:40:c6:b5:82:6a:a7:8b:7d:97:dc:bd:20:84:27:29:48:
         ad:15:1b:f4:7c:ee:73:68:43:e1:8b:e6:4a:da:a9:67:dc:21:
         bd:65:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:27 2026 by rpki-client