Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
File:                     83g6eIBQ7px-F4lbU93tZGqSTEA.cer (raw, json)
Hash identifier:          szc8p6VLg0fvlBbJyUQKKqVF1Vlw7JKf4TPTgjADnZc=
Subject key identifier:   F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A476
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 16 Mar 2026 08:42:19 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 154343
                          IP: 2001:df6:4740::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173174 (0x2a476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 16 08:42:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:29:80:db:6c:0c:6b:f9:79:dc:15:3c:7a:
                    dd:09:4a:81:d6:46:f2:8d:41:23:f4:a9:fa:a4:ef:
                    63:60:74:51:b3:85:e0:3a:4b:83:d6:db:60:97:a7:
                    7c:e1:de:b4:40:7b:af:fb:a6:f9:e2:8e:99:a9:87:
                    64:87:03:07:9a:81:09:b1:3e:a3:83:24:5c:28:e7:
                    dc:63:2a:f8:d0:f9:7e:ab:16:9a:78:ee:82:c9:0c:
                    c3:d0:ea:c5:05:aa:6c:27:6b:3e:f9:a5:b5:21:35:
                    34:6f:38:ef:e5:a6:04:c7:ae:ed:d8:50:6f:d3:1d:
                    f8:e5:5d:91:ac:41:0b:df:29:78:95:1f:bc:12:d1:
                    80:3d:9f:4c:e8:97:ac:14:dd:98:2a:a8:2e:65:98:
                    25:2f:4c:ac:90:4d:ea:3f:8d:f0:1a:b7:62:03:0e:
                    0f:5f:31:f7:7f:dd:fc:30:92:8a:66:51:04:f7:7e:
                    77:3b:fa:2f:7c:4c:73:f7:39:38:06:0a:20:fd:36:
                    87:5b:31:4b:b8:30:02:dc:92:e3:69:6f:bf:c7:e6:
                    b2:c4:c9:7f:c6:a3:9a:50:fa:ac:e0:82:1a:12:79:
                    0e:64:fd:2d:ff:89:5c:3a:bd:cf:4f:98:35:98:a5:
                    6c:1a:77:c6:73:88:33:ea:4e:53:dc:b1:77:ce:e7:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154343

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4740::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:30:13:97:5d:01:1d:83:23:3f:4d:83:71:19:9a:ae:28:65:
         35:13:50:6c:5f:40:30:6a:98:c9:6c:3d:df:48:0f:46:82:e3:
         ce:c2:bb:ff:e3:c7:d9:66:0f:a1:87:ed:df:7e:6b:76:22:80:
         df:2a:65:29:95:ea:1c:c2:d7:62:cf:0e:ce:0c:8d:a1:8c:4f:
         86:0f:e4:25:fc:ae:a4:a2:5f:a7:9e:ac:9e:6d:fb:b5:53:d4:
         cf:11:23:7d:1c:48:aa:30:3c:64:3c:9c:88:d9:ff:a5:a3:80:
         5c:66:15:b6:48:07:fb:3f:8a:6f:d4:2e:36:20:91:e7:c9:e5:
         d6:16:e5:d3:56:c7:0a:a8:f2:64:21:2a:31:ba:ae:94:6e:f9:
         4a:21:d9:f9:45:a4:f3:78:e1:dc:7d:b9:a7:74:3a:57:37:4d:
         e9:49:f7:84:1b:11:e1:82:6b:86:eb:8d:1b:cf:f5:88:29:87:
         fb:8d:27:a3:b6:1a:75:92:44:53:8e:16:b3:e3:77:c3:6d:96:
         85:2d:85:66:c1:82:6e:7c:7d:17:be:8e:bd:51:26:ac:bc:4c:
         19:43:e9:e8:35:97:e8:84:bb:65:d6:66:e3:07:1a:70:60:04:
         ae:70:5d:47:48:5e:27:67:3a:79:55:3d:df:de:2c:70:86:aa:
         71:30:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:57 2026 by rpki-client