Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
File:                     AVyC748X910B8qMGeGhd_cJeH3w.cer (raw, json)
Hash identifier:          qr4hm967cLgwEU64bFzzPp06K5wjmbZDbvXa0+HUCfg=
Subject key identifier:   01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BECE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 22 Jun 2026 13:51:52 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153764
                          IP: 163.227.6.0/23
                          IP: 2401:fba0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179918 (0x2bece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 22 13:51:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:78:e2:e4:de:fb:07:f4:d2:d8:d6:cf:f0:
                    e8:53:3b:f2:ff:f0:8e:1d:f5:76:f2:50:d6:4b:27:
                    95:8c:80:ef:97:2c:f7:65:4c:88:06:32:e8:00:3d:
                    75:0a:56:41:51:b5:d4:cd:1b:83:d4:8a:82:9a:a4:
                    e0:fd:7e:37:02:b6:3f:54:81:5e:8e:63:2f:05:b9:
                    2d:2b:ae:87:33:44:94:cc:61:ac:58:47:e0:58:54:
                    5e:f9:c5:a3:83:7a:78:79:90:c9:d3:68:8a:9c:16:
                    37:66:f9:b8:69:d2:f9:ec:15:bf:c9:ef:5e:fa:91:
                    29:03:2f:cf:fe:72:0d:80:02:8d:bf:aa:27:4a:f9:
                    91:1e:92:a8:27:48:ea:28:42:8f:eb:0b:12:57:5b:
                    f9:62:91:e8:e9:51:df:da:98:89:87:ad:e3:e2:0f:
                    cb:b5:8c:d5:fe:ac:e3:a9:7b:7f:c2:9a:fe:a1:00:
                    2d:4c:2e:f6:83:1e:16:46:a3:45:88:f6:70:e9:5a:
                    a7:b5:27:d3:ce:ba:a0:e4:c0:30:8a:ef:49:ff:35:
                    f6:87:1f:d8:6b:91:3e:69:7c:af:9d:76:5d:90:f8:
                    53:21:02:75:b5:6d:8f:81:a2:0e:75:26:38:e1:b7:
                    75:7c:e6:7d:2d:c4:f3:38:8c:02:50:5d:65:e9:d3:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153764

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.6.0/23
                IPv6:
                  2401:fba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:f5:75:17:ae:a3:c5:fb:bf:f7:58:26:4c:ed:54:89:77:71:
         9e:48:31:c4:88:9f:03:fe:cf:94:1b:bd:44:f0:90:dc:84:42:
         18:26:91:73:78:18:9c:56:50:68:6a:a8:1f:4c:28:50:70:be:
         7e:8e:41:fe:cc:b6:27:ef:ea:ee:38:2a:7c:d0:e2:f4:e0:eb:
         1f:bb:d9:b6:42:0b:36:ec:65:31:34:25:f2:2a:2b:aa:64:00:
         0b:d5:93:68:2d:c7:be:0c:75:bc:7f:b6:f8:b3:ab:84:70:a9:
         25:4a:88:de:cc:88:58:d9:3f:78:0e:34:0a:e0:d0:37:22:81:
         9c:a3:6c:a7:65:1e:d6:c7:0d:46:1d:9f:19:f6:c1:04:41:48:
         e2:59:fd:1a:73:d3:b3:b1:ae:90:ae:6d:4a:e2:f4:7f:1f:9d:
         de:5e:9e:19:eb:e8:b2:cf:9a:15:b1:e0:ed:47:60:58:be:12:
         3d:a9:7c:82:4d:e3:65:07:33:e8:9f:fa:d9:d8:1d:3e:b4:d6:
         ed:d8:f1:9d:d6:eb:4f:d3:5d:c6:ff:7d:6a:8c:2b:29:0d:a3:
         cc:a7:18:f6:1f:27:a3:c2:af:c5:3e:69:6e:0f:3c:5c:17:74:
         63:22:fb:d8:cd:80:50:92:c0:0f:82:42:2a:cb:8a:d7:1a:da:
         d3:20:fc:15
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAr7OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYyMjEzNTE1MloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTNFRUUxMTAvBgNVBAUTKDAxNUM4MkVGOEYxN0Y3NUQwMUYyQTMw
Njc4Njg1REZEQzI1RTFGN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmCXji5N77B/TS2NbP8OhTO/L/8I4d9XbyUNZLJ5WMgO+XLPdlTIgGMugAPXUK
VkFRtdTNG4PUioKapOD9fjcCtj9UgV6OYy8FuS0rroczRJTMYaxYR+BYVF75xaOD
enh5kMnTaIqcFjdm+bhp0vnsFb/J7176kSkDL8/+cg2AAo2/qidK+ZEekqgnSOoo
Qo/rCxJXW/likejpUd/amImHrePiD8u1jNX+rOOpe3/Cmv6hAC1MLvaDHhZGo0WI
9nDpWqe1J9POuqDkwDCK70n/NfaHH9hrkT5pfK+ddl2Q+FMhAnW1bY+Bog51Jjjh
t3V85n0txPM4jAJQXWXp0wI7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUAVyC748X
910B8qMGeGhd/cJeH3wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzRUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5M0VFRS9EQkI4OUY5RTE1MkIxMUYwODkyRkQ0ODFDNEY5QUUwMi9BVnlDNzQ4
WDkxMEI4cU1HZUdoZF9jSmVIM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlikMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBo+MGMA0EAgAC
MAcDBQAkAfugMA0GCSqGSIb3DQEBCwUAA4IBAQDV9XUXrqPF+7/3WCZM7VSJd3Ge
SDHEiJ8D/s+UG71E8JDchEIYJpFzeBicVlBoaqgfTChQcL5+jkH+zLYn7+ruOCp8
0OL04Osfu9m2Qgs27GUxNCXyKiuqZAAL1ZNoLce+DHW8f7b4s6uEcKklSojezIhY
2T94DjQK4NA3IoGco2ynZR7Wxw1GHZ8Z9sEEQUjiWf0ac9Ozsa6Qrm1K4vR/H53e
Xp4Z6+iyz5oVseDtR2BYvhI9qXyCTeNlBzPon/rZ2B0+tNbt2PGd1utP013G/31q
jCspDaPMpxj2Hyejwq/FPmluDzxcF3RjIvvYzYBQksAPgkIqy4rXGtrTIPwV
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:37 2026 by rpki-client