Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
File:                     QuOGLXRTXCypqrN6cZW1keruIeU.cer (raw, json)
Hash identifier:          sugIYnteCsZ7X0CW/dNCU1/VCnvdFfwJLCuLMEgXYts=
Subject key identifier:   42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B115
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 May 2026 06:24:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 153726
                          AS: 154648
                          IP: 163.223.173.0/24
                          IP: 2001:df5:4740::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 14:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176405 (0x2b115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  1 06:24:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:d0:94:37:1d:01:75:5f:3e:99:b1:33:eb:
                    a8:53:76:50:ab:b7:b2:e1:f8:27:9c:43:b1:d0:48:
                    7f:28:1d:a5:79:00:9f:fd:7f:31:21:34:a0:8e:45:
                    32:a8:0b:95:36:90:62:2c:8c:f2:ec:7c:99:f6:d1:
                    28:4c:16:93:d0:5a:97:c6:d4:21:25:eb:04:58:66:
                    98:4c:d2:67:b6:4b:7b:13:b4:9c:03:e8:ee:49:e6:
                    3c:29:47:de:2a:a4:71:5a:01:e3:ff:b2:2f:5f:80:
                    c0:a9:cd:18:dd:61:ab:c4:5b:b0:75:22:5d:16:ed:
                    5c:7b:91:32:7c:95:16:c2:64:13:c0:28:b9:fc:e8:
                    e1:3e:76:c0:4c:96:3a:90:8f:11:8b:00:e3:ce:55:
                    82:c5:55:ff:27:02:18:48:5c:d7:0b:8f:df:b5:c2:
                    b2:e6:40:70:b9:a2:30:01:41:a3:13:5c:74:61:c1:
                    e8:c2:39:16:43:1a:c9:55:3a:64:2d:c2:8d:b6:bc:
                    52:a2:86:95:eb:84:28:24:a1:b0:8c:fe:4f:0c:65:
                    3f:89:6e:ea:f0:4c:af:96:85:ca:53:e5:71:d0:40:
                    e1:31:c4:5c:d0:11:68:b1:2c:39:c5:9d:86:21:97:
                    53:44:35:51:11:0b:28:53:66:d6:a7:b0:f0:85:8e:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153726
                  154648

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.173.0/24
                IPv6:
                  2001:df5:4740::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:35:74:a8:78:8f:0d:49:dc:4c:42:78:a6:c4:ff:f3:ab:
         d6:e5:fa:51:80:36:f0:f6:56:0f:87:e1:16:88:7e:8e:97:de:
         14:45:ef:ea:13:97:16:5c:da:99:7c:ae:45:cf:a3:26:97:18:
         3f:d8:69:43:a6:a5:eb:e2:62:25:41:9c:84:61:13:62:23:ef:
         21:01:d2:e1:66:6a:bd:cb:5a:9a:ea:b2:81:9b:fb:97:fd:32:
         3a:bd:f4:f1:f2:21:ae:de:c3:66:45:3b:05:35:26:5d:3e:4c:
         e1:81:a6:21:3d:c9:9f:17:85:ac:08:ed:3d:39:e8:51:cb:2d:
         df:7f:e7:e2:3a:f0:f2:59:a3:06:d9:b3:d6:70:19:e6:96:31:
         d5:1a:66:1f:09:10:39:bd:09:39:73:e9:c3:7f:cb:e3:0e:5c:
         b7:43:2d:06:a4:9c:0e:29:09:fd:20:53:db:da:25:28:b2:ae:
         35:d5:c3:ca:4a:ee:cc:90:fe:d1:23:f5:0b:36:a0:2d:82:2c:
         a7:ac:d1:aa:60:65:c8:88:f1:8b:e0:04:a2:74:f0:70:ce:25:
         7c:a3:bc:c1:fb:fc:5d:a9:10:9c:64:59:78:b3:14:0c:ae:e0:
         e3:6f:9f:b7:6b:3e:df:00:ef:62:e1:7c:06:ae:fa:29:9a:4e:
         1e:9c:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:55 2026 by rpki-client