Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
File:                     JbCzFZvpDPGiOyUhpSER_wOQXvc.cer (raw, json)
Hash identifier:          neNOYvbI7wOI+zeRPkDWKG2CZ0f3d6nhGyeqJVEgVf4=
Subject key identifier:   25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AF96
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Apr 2026 13:53:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 163.223.227.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176022 (0x2af96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 13:53:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:80:1b:da:e7:ae:5b:0b:70:2b:e9:00:ab:
                    b2:81:1c:53:ee:a2:34:60:06:62:10:26:da:b5:85:
                    fb:69:2d:4c:d4:33:c0:ef:d8:36:b1:4a:de:17:b3:
                    bd:43:0f:89:43:18:9b:cb:4f:08:70:40:66:8e:a7:
                    e6:c1:1a:c4:1f:85:a9:b0:dc:19:57:40:b4:e1:d2:
                    43:26:fc:cb:13:ce:f2:67:c7:88:af:e7:8f:22:ec:
                    34:90:a1:da:18:62:33:3a:6b:75:4f:98:72:20:9c:
                    26:85:0d:55:1c:ea:b5:87:52:0e:bd:1e:4e:d3:87:
                    03:ee:1d:d3:10:9c:91:af:b6:ff:6e:29:be:79:68:
                    18:2f:ae:05:e1:9b:8b:16:2d:bb:00:1c:f6:a2:d9:
                    7f:e8:66:c8:82:74:6d:05:28:32:cd:bf:8f:36:78:
                    c2:44:d8:bd:e7:6f:0f:d4:d6:c6:b7:35:54:df:39:
                    f4:c7:c1:ec:22:a5:22:63:7e:42:be:cc:c9:d4:b0:
                    dd:81:da:57:9c:d5:fc:7e:c2:63:00:d2:da:07:9f:
                    02:11:6f:13:e4:d0:56:64:24:db:60:fe:7b:33:01:
                    13:1a:ee:ca:a5:91:80:38:ec:06:72:5c:58:bf:83:
                    8c:10:f1:60:af:b7:60:a9:09:e9:a9:ec:71:73:56:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:10:61:78:19:98:db:90:8d:97:e2:a9:b2:e6:46:59:0a:aa:
         2a:1c:4b:4d:78:60:06:46:f7:9f:72:58:68:75:bb:09:5f:65:
         da:a5:fd:9a:a5:26:6a:98:38:a7:20:4e:9e:32:94:62:b4:c8:
         97:ae:45:76:be:bf:13:49:c0:f6:e5:84:b2:c2:1c:d4:da:e2:
         ce:d5:90:75:db:a6:87:80:1d:fe:d1:ce:8e:b5:02:ca:02:30:
         dd:bf:61:ec:00:c4:db:60:66:cb:61:83:da:5a:04:cf:e6:97:
         54:d5:8c:c5:ba:da:07:1d:f1:10:67:52:37:1b:3b:5b:5e:6d:
         35:40:eb:fd:de:69:78:8a:5c:c0:ae:51:ef:19:43:e3:c9:4f:
         b2:48:90:31:0b:82:39:72:8f:c5:5d:45:31:fa:37:43:80:c2:
         9d:7a:5b:c6:d7:62:5e:14:0d:7e:00:b7:43:ea:b7:7e:1e:7e:
         a9:27:87:5d:8b:04:9b:13:59:65:de:f2:17:74:16:98:95:6a:
         ea:d3:e9:34:e6:d9:e9:6f:5f:35:2d:65:f5:2f:94:d7:c2:5f:
         fc:3c:fa:b3:58:0b:75:2e:52:14:2d:91:11:08:81:1e:7b:8b:
         77:69:08:d9:5f:e2:08:c0:6b:ad:ae:5a:c6:fe:46:0c:98:e7:
         86:29:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:42 2026 by rpki-client