Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer
File:                     9-atF_jVbGMrJcCb46mBDDEFNIM.cer (raw, json)
Hash identifier:          R7YSNGpG1A5skAs0hO2jIb3vXB0lJfiDl+P0OKPW2BU=
Subject key identifier:   F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B226
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 13:54:36 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153781
                          IP: 163.227.43.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176678 (0x2b226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  4 13:54:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A919075D, serialNumber=F7E6AD17F8D56C632B25C09BE3A9810C31053483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:7e:1a:49:40:ff:9c:fe:33:43:52:b2:b8:
                    da:64:d8:b4:d8:41:06:c9:9d:22:21:16:cb:e0:8b:
                    52:43:7b:c7:72:1c:47:9c:97:49:7b:88:4c:0d:2c:
                    72:7e:1c:95:19:b8:58:0c:18:5c:4b:c0:d5:a2:72:
                    ef:0e:0b:d0:7a:7d:27:e3:7b:c0:0f:e4:4b:cd:94:
                    d7:89:92:27:ea:c5:10:6b:f5:17:9e:3b:71:17:9d:
                    62:fe:9a:f5:0d:50:1b:3f:3d:3e:f1:21:b5:ad:10:
                    e5:b9:24:12:d1:ad:cd:5a:80:a8:6f:16:7a:97:c7:
                    b3:60:ff:f4:98:a8:d8:a9:48:20:5f:41:3e:fa:eb:
                    93:cd:a7:d3:47:ab:04:59:e3:07:1b:b6:fe:af:31:
                    bd:02:98:4d:0a:50:23:77:f1:bc:7d:30:49:f4:63:
                    d2:17:45:b6:fd:3b:47:9f:46:dc:a7:9c:77:bc:f8:
                    e7:77:29:2e:7a:90:0f:4a:6d:ff:95:ea:68:e2:55:
                    eb:8a:a1:0d:79:f2:fb:56:82:55:b5:42:3e:db:c9:
                    77:95:2b:89:c0:e7:29:21:df:c7:1d:1b:e2:20:2b:
                    7e:db:49:72:ac:7c:8e:c0:64:92:92:fe:f6:27:0c:
                    ab:0c:c8:7d:df:c6:6a:f0:dc:45:73:ef:fe:24:0d:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153781

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:2c:c0:92:7c:fa:2f:6b:db:2d:11:63:a5:4a:11:40:d1:
         72:24:fb:05:75:00:f4:60:ce:82:64:27:ad:11:06:0e:68:8f:
         b8:90:2b:4d:de:5f:ea:92:8e:a9:7e:2c:18:de:e3:8f:18:c4:
         54:5a:30:18:49:70:da:1c:0b:00:89:fd:6c:d1:59:bf:e6:49:
         0f:0f:9d:72:74:91:65:50:bf:7c:a8:e2:bf:e4:f2:0c:89:be:
         5e:d1:9e:ee:43:36:79:51:ef:88:44:88:99:a1:e7:ab:82:53:
         6d:15:c6:da:b7:7b:f8:92:a0:0f:70:e3:69:6b:01:bf:74:05:
         ac:f8:f5:0b:b6:0b:36:47:6a:fd:fc:fb:f5:77:e6:4b:f7:fc:
         45:e8:d3:14:c3:cc:d5:5f:34:30:35:90:50:e5:7f:7d:d2:bd:
         96:62:59:09:ca:25:6b:55:ec:02:a5:89:63:2e:7a:89:30:67:
         b3:e7:c3:2f:cf:50:82:a3:21:8e:c3:98:04:ed:c7:d7:7d:8d:
         3a:71:8e:f1:37:6d:48:e9:71:c5:35:c6:88:d1:ad:b0:f2:84:
         90:ee:d2:f0:08:2e:96:dd:cc:67:a4:c6:ce:82:53:62:ec:9d:
         aa:91:24:be:9a:3f:ee:02:3e:1e:6a:1f:e6:c1:98:79:cd:97:
         97:22:30:e4
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDArImMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNDEzNTQzNloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTA3NUQxMTAvBgNVBAUTKEY3RTZBRDE3RjhENTZDNjMyQjI1QzA5
QkUzQTk4MTBDMzEwNTM0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUHX4aSUD/nP4zQ1KyuNpk2LTYQQbJnSIhFsvgi1JDe8dyHEecl0l7iEwNLHJ+
HJUZuFgMGFxLwNWicu8OC9B6fSfje8AP5EvNlNeJkifqxRBr9ReeO3EXnWL+mvUN
UBs/PT7xIbWtEOW5JBLRrc1agKhvFnqXx7Ng//SYqNipSCBfQT7665PNp9NHqwRZ
4wcbtv6vMb0CmE0KUCN38bx9MEn0Y9IXRbb9O0efRtynnHe8+Od3KS56kA9Kbf+V
6mjiVeuKoQ158vtWglW1Qj7byXeVK4nA5ykh38cdG+IgK37bSXKsfI7AZJKS/vYn
DKsMyH3fxmrw3EVz7/4kDZRDAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU9+atF/jV
bGMrJcCb46mBDDEFNIMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkwNzVELzc4QkRDQjk0NUI5OTExRjA5OEU2NTkzOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MDc1RC83OEJEQ0I5NDVCOTkxMUYwOThFNjU5MzhDNEY5QUUwMi85LWF0Rl9q
VmJHTXJKY0NiNDZtQkRERUZOSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAli1MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo+MrMA0GCSqG
SIb3DQEBCwUAA4IBAQCNeCzAknz6L2vbLRFjpUoRQNFyJPsFdQD0YM6CZCetEQYO
aI+4kCtN3l/qko6pfiwY3uOPGMRUWjAYSXDaHAsAif1s0Vm/5kkPD51ydJFlUL98
qOK/5PIMib5e0Z7uQzZ5Ue+IRIiZoeerglNtFcbat3v4kqAPcONpawG/dAWs+PUL
tgs2R2r9/Pv1d+ZL9/xF6NMUw8zVXzQwNZBQ5X990r2WYlkJyiVrVewCpYljLnqJ
MGez58Mvz1CCoyGOw5gE7cfXfY06cY7xN21I6XHFNcaI0a2w8oSQ7tLwCC6W3cxn
pMbOglNi7J2qkSS+mj/uAj4eah/mwZh5zZeXIjDk
-----END CERTIFICATE-----
Generated at Tue May 12 22:28:36 2026 by rpki-client