Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
File:                     RpDBBq64PHTXvfOk55k8CYErrPw.cer (raw, json)
Hash identifier:          YMEi4JghSPezwGQqKXjanFp1H2Oc6RNu2OPNF3jl1nc=
Subject key identifier:   46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B2A6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 06 May 2026 07:44:28 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    IP: 111.68.0.0/20
                          IP: 2400:e7c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176806 (0x2b2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  6 07:44:28 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c0:5b:99:8e:21:1d:16:02:44:a1:93:5f:1f:
                    41:ed:7e:0f:bc:55:6b:9f:77:bf:fb:57:9e:47:48:
                    19:98:d6:0f:5a:46:b5:46:87:ae:5d:57:7d:7d:fa:
                    64:87:95:7a:80:16:38:47:39:17:80:cc:07:5c:d9:
                    d3:a9:f4:58:d1:ee:9b:3f:bd:15:bd:12:d5:0b:04:
                    b2:2d:0f:55:80:1b:9a:02:1d:3d:f4:fd:72:33:ea:
                    70:6f:4b:77:9f:36:55:13:4c:03:29:9e:e8:48:20:
                    c8:eb:e4:b3:fe:93:80:fa:66:83:87:c4:6d:9e:56:
                    a1:b1:b9:f3:66:17:cc:e2:80:fc:b9:0e:33:94:f9:
                    1c:70:23:4e:8e:5d:1e:50:42:68:9b:12:42:69:7b:
                    33:6a:27:99:ad:48:49:ba:b8:f5:d7:32:ef:1f:95:
                    55:a3:d7:aa:ee:12:56:ad:6a:b9:15:62:1b:43:fe:
                    83:af:84:a5:a2:5b:4f:b2:6f:8e:85:d3:35:4b:8d:
                    de:22:5b:57:d9:51:88:9e:15:ba:22:54:71:d9:bb:
                    e1:8b:1b:1c:0a:af:d1:d4:39:7c:ea:ec:25:45:35:
                    d4:97:5f:ad:42:70:f9:19:a3:ee:d7:0c:25:e9:7b:
                    c0:d0:02:45:c3:95:8c:9d:c8:bb:af:14:5c:7d:a0:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.0.0/20
                IPv6:
                  2400:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:b5:71:03:54:a2:cd:1b:dc:5a:31:8f:15:3e:e2:d5:f3:
         f3:3a:bf:0c:f1:db:e7:8d:e1:48:66:df:42:6c:fe:be:7c:db:
         77:ba:76:65:af:78:2f:ee:68:f9:52:e6:8d:5e:26:2f:8e:41:
         0c:82:5b:cd:fc:3d:66:de:b8:07:b1:42:40:2b:22:d6:67:87:
         0d:9d:3e:7b:15:3c:31:ab:59:d3:d2:b7:f6:03:ce:ba:f8:98:
         34:10:56:3a:d9:cd:1e:ef:8f:64:a6:e6:15:19:f9:31:35:0b:
         b3:b4:85:5e:42:8b:e0:f2:8d:f6:48:ed:4e:43:b7:22:da:b1:
         ed:cb:b4:56:1e:f8:36:08:02:55:79:ea:73:0c:88:be:8b:dc:
         e4:a0:b1:33:93:3a:33:18:30:ef:e6:7a:ee:6c:b1:bf:b2:43:
         4f:0e:3f:7a:19:f9:ca:11:da:33:0c:f1:e5:16:b8:fc:61:ab:
         66:61:58:ca:f8:2d:fd:f4:00:ae:c9:b4:9b:b1:40:f5:88:d4:
         d1:fa:d7:50:22:d3:71:0e:6c:cd:59:d1:ee:3d:08:37:58:39:
         72:80:df:8e:a1:ae:23:3e:f0:b9:3a:21:a9:d1:4f:e5:da:39:
         37:6d:bf:67:66:2c:ff:46:57:60:4f:ed:7f:10:4d:18:34:0e:
         31:d6:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:19 2026 by rpki-client