Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
File:                     IjvhmJLm5stAbl-plW3bzqlcu0Y.cer (raw, json)
Hash identifier:          ABx9dtLEmNx8ITw+5sT79uMufoMxSVFy1Hp0ZbpvUuY=
Subject key identifier:   22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B07B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Apr 2026 13:48:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 10152
                          AS: 18036
                          AS: 136518
                          AS: 151973
                          IP: 203.26.75.0/24
                          IP: 2401:3d40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176251 (0x2b07b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 29 13:48:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3c:bd:58:67:e7:af:0b:cc:ca:89:d1:61:37:
                    37:d6:f3:95:3d:e0:76:31:a9:47:a5:75:76:da:90:
                    6e:a7:09:9e:82:d7:18:27:75:18:9b:1b:0c:7d:c1:
                    ce:55:76:99:e9:ed:85:e0:a4:45:8a:f1:76:20:e8:
                    32:bd:0f:24:0c:ca:2d:88:a7:52:fc:8c:18:17:56:
                    93:29:c3:56:2c:43:1f:b2:46:4f:fb:1d:46:ed:76:
                    0e:7c:55:8e:16:b9:de:c0:5c:40:c4:cf:3f:2a:12:
                    57:6a:99:a4:5f:ff:58:13:b4:51:7b:fa:9e:a5:d6:
                    86:78:95:a4:bb:a6:92:60:3e:68:a6:b3:ba:0b:b5:
                    18:f8:5c:97:59:c4:0e:8b:88:bd:8d:f9:e5:ce:4e:
                    fe:9b:29:df:3e:cf:dd:35:15:fc:b4:fb:43:72:4f:
                    89:b5:b9:01:2a:a6:18:11:a7:3b:46:55:b3:28:13:
                    b0:fd:90:20:c1:d9:b8:98:51:6c:e6:f6:39:d9:a4:
                    e6:19:a7:52:b1:9e:03:a4:03:b7:09:1c:6d:5b:f3:
                    9c:9e:c7:37:b2:ba:8d:bc:bf:0e:60:48:ab:f9:82:
                    41:e2:be:91:30:d5:02:9d:47:cb:7f:3e:de:f5:d4:
                    af:7d:bf:8a:02:ba:31:12:60:9c:bf:50:33:31:92:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10152
                  18036
                  136518
                  151973

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.75.0/24
                IPv6:
                  2401:3d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:8b:de:43:71:05:b5:9d:ec:3e:a5:0d:77:d8:3a:8b:5c:eb:
         db:75:67:02:68:33:8d:45:fd:fb:e5:4e:c1:fd:c2:52:84:c5:
         e8:62:3a:c3:51:4d:18:5a:f0:70:80:06:7b:5b:68:d3:e8:ae:
         1c:99:9a:c7:e3:47:0f:04:c4:6e:5d:1d:00:46:5f:80:59:51:
         59:2b:75:72:78:70:40:6a:40:17:28:df:ec:60:24:85:86:8d:
         90:34:4c:8a:33:69:6b:df:78:cd:ee:47:fa:4f:de:11:ca:23:
         fb:00:c8:9c:1e:6e:4b:82:5c:81:0a:6d:9a:84:9c:b6:6f:64:
         f7:fd:5e:1e:e1:53:34:ec:0f:a2:12:11:52:b5:a8:4f:d7:bf:
         7c:f5:3b:91:4b:2e:f8:6e:cc:5d:fc:68:97:37:ef:13:96:0f:
         4b:1e:57:8a:ea:7e:63:96:89:b7:52:55:9b:7c:3b:16:dd:c4:
         a6:06:19:f2:da:1f:70:f5:89:d6:f9:e5:a5:6c:eb:f2:03:3b:
         1b:0e:83:02:04:6c:91:73:27:61:ff:3d:15:13:c6:bc:e5:4a:
         d6:96:d9:88:0e:46:11:40:e2:e5:5c:38:c9:8f:93:6f:b6:1b:
         98:fb:66:55:3d:c8:a5:1b:cb:b8:49:be:ec:9e:4d:54:49:0a:
         14:76:f0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:55 2026 by rpki-client