Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
File:                     G7ThccrEGeYWe6On1yU8dhYxoo0.cer (raw, json)
Hash identifier:          PIEMIo49NMIU7Q3t3rOGWnHcbZZOPA1/b/6uHQFxiBw=
Subject key identifier:   1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AF7D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Apr 2026 12:36:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 150694
                          IP: 163.223.186.0/23
                          IP: 2001:df5:47c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175997 (0x2af7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 12:36:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:27:e8:ea:2b:50:02:77:e1:73:2e:79:0c:
                    d2:bf:c3:28:4d:23:5b:4c:6c:7f:57:e9:18:44:5e:
                    d4:4b:98:b6:10:e5:96:b2:c4:d2:5a:54:c1:99:43:
                    66:02:95:45:56:45:7d:d0:86:47:15:8d:f2:3e:23:
                    91:d8:bd:d1:2b:e3:6f:8a:c5:82:81:ae:e2:5a:fe:
                    af:49:45:24:2b:21:a2:89:6e:7f:14:05:6f:1c:f7:
                    b9:04:93:d9:32:30:ea:70:2f:23:61:eb:46:d9:e5:
                    ec:7c:e2:84:74:c2:71:fa:c9:48:0c:e3:bd:3d:2b:
                    c2:10:10:07:79:11:4f:c3:73:76:54:c2:39:45:cf:
                    7f:e7:9f:dc:72:81:8a:f6:f0:53:21:33:25:24:20:
                    0f:d0:1c:29:c5:13:75:0f:b4:4d:c6:83:73:85:5d:
                    cb:63:3a:7c:8a:40:cd:7c:5d:35:6f:9c:a0:99:0b:
                    97:57:b6:3b:d8:0c:27:f6:7c:21:92:07:51:ff:e1:
                    e1:bd:42:5f:35:d5:d5:28:c6:9a:85:77:8c:6f:4b:
                    2e:57:30:88:f9:62:ed:87:ed:b7:b8:ec:7f:2e:ac:
                    f3:94:23:33:97:5d:a3:3b:97:64:e1:55:37:ba:95:
                    e9:ed:90:9a:f7:6e:c6:da:25:e6:df:7f:8e:70:ac:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150694

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.186.0/23
                IPv6:
                  2001:df5:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:36:0f:fc:e8:55:bd:10:3c:e5:ad:3b:69:52:67:32:87:01:
         32:32:4c:b7:19:3d:0d:1b:86:e3:7d:c3:73:23:ad:82:45:ad:
         aa:66:fc:e6:15:32:61:0c:55:04:f7:57:5a:50:1e:02:ff:61:
         28:e2:67:28:cd:31:d3:46:e9:08:a9:49:50:d1:50:75:2c:ca:
         f0:86:68:02:50:ad:1b:90:ae:4d:46:16:9d:c5:43:40:60:f0:
         a2:b5:0a:66:17:1c:15:33:a2:69:e8:67:95:ab:3f:52:d8:53:
         ff:ef:11:4e:8d:3e:56:4b:e1:81:df:cc:41:28:3c:33:75:e9:
         78:92:24:99:1a:20:c8:61:bb:86:ea:e0:33:a3:df:46:63:1e:
         5d:b9:aa:4d:23:24:d6:e3:99:8e:98:7b:4e:21:dc:f5:ed:2f:
         98:5c:e6:6f:0f:85:e7:81:e7:b2:4b:1b:ff:00:e4:5f:69:67:
         91:a3:50:3d:26:4f:68:ec:aa:be:72:89:9d:d9:57:a9:38:2d:
         35:b9:d3:01:ee:3b:e7:47:0b:29:0e:3c:98:0a:5f:fb:32:46:
         3e:09:46:36:55:ae:60:1d:98:20:4c:30:c5:dc:6b:4a:45:07:
         83:3f:96:df:eb:6e:33:17:0d:c2:9b:64:4e:57:95:dd:bc:90:
         a6:c2:3b:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:31:51 2026 by rpki-client