Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.cer (raw, json)
Hash identifier:          UWT5YxWv88x9UmwtugY1bvDq7rOhSCVSmLVBOsTSa/4=
Subject key identifier:   18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C602
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 14:03:43 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 154022
                          IP: 2402:14a0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181762 (0x2c602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 20 14:03:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:dd:de:44:74:48:96:c2:37:42:52:ab:ba:
                    ae:9e:ec:96:36:7c:13:29:b9:eb:46:1c:93:70:87:
                    9e:7a:b2:3f:b8:44:e0:b8:3f:8d:d7:3b:0f:36:38:
                    09:8c:8f:71:4d:45:66:6f:0d:73:fe:ba:f7:d0:ba:
                    dc:5d:92:49:88:ed:9c:8e:3a:dc:b1:a3:be:dc:a6:
                    be:7b:06:8d:3c:4a:fb:6f:71:1d:aa:d3:38:62:0b:
                    e4:91:3d:58:c9:38:0e:37:a2:42:82:d7:0f:80:80:
                    d7:81:36:3a:58:ed:53:49:7a:32:cb:2d:d7:0c:2c:
                    fd:81:bd:b2:b9:83:f5:b9:52:c7:07:f4:af:62:83:
                    28:0b:2b:5f:5c:92:6d:44:dc:6d:d2:be:e4:56:b6:
                    52:9b:12:50:db:c8:46:68:57:4d:e6:78:54:66:df:
                    c7:56:d7:1e:70:d7:0f:53:5d:5e:f2:f2:bb:6e:a6:
                    ca:4b:ea:b1:4f:95:93:6d:0b:65:8f:a4:5e:1a:00:
                    a8:2d:37:bc:a6:2c:44:ac:bb:0e:9d:38:59:e2:d9:
                    05:c4:45:75:06:86:91:6b:98:f6:1f:ce:46:09:7c:
                    b5:fa:fc:d6:ff:3a:10:58:a9:2a:16:31:3e:96:dd:
                    e6:04:a4:66:28:d6:6f:00:57:96:5f:08:34:84:d1:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154022

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:14a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:ee:64:d3:1c:fc:d8:49:54:4b:f6:f1:b4:22:1e:78:cd:
         7a:be:b0:42:bb:d4:93:27:19:00:8f:d9:fe:4a:9d:bd:6b:44:
         bb:c1:e3:cc:93:7a:80:6f:fb:5a:a9:fa:f2:d2:fd:40:bc:b0:
         45:b9:db:85:5c:b7:db:4f:14:15:56:65:b9:86:38:80:bd:d8:
         cb:63:0a:05:ab:19:e0:d4:20:c8:46:9a:02:9f:bb:16:36:e0:
         4f:0c:8f:00:71:8a:53:10:4d:24:03:da:69:26:b9:d8:a4:ee:
         5f:64:18:44:f7:fb:d8:ad:9a:58:14:9b:df:c6:6a:43:d8:87:
         f3:72:ed:9a:16:a9:77:b7:f4:05:55:93:0b:73:c0:b2:d9:7c:
         6a:a6:42:9b:aa:ef:f8:c0:b5:97:47:3d:34:24:98:4a:21:06:
         0f:73:b6:57:1c:e5:67:19:e5:28:38:a6:b7:9a:e5:be:4d:c5:
         5d:a4:e8:e6:4f:81:97:86:8a:dc:43:37:a3:df:f1:5e:f3:bf:
         64:d3:e4:81:82:53:56:b6:5a:ff:4d:ae:f8:ca:71:f6:dd:24:
         66:b0:c8:85:e8:28:10:ce:38:6b:6b:32:4f:57:09:46:95:f9:
         74:16:e3:28:54:f1:b3:ca:ad:c2:d7:fa:21:5a:05:88:df:58:
         ba:6d:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:05 2026 by rpki-client