Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
File:                     bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer (raw, json)
Hash identifier:          TxCjjevqdbNexeqWXjfXqGj4Z4VC8qyxjOH5zEqAaFs=
Subject key identifier:   6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AE1D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Apr 2026 09:30:53 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 154641
                          IP: 2001:df6:f6c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175645 (0x2ae1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 22 09:30:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91D4FA2, serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:c2:54:26:a3:c3:9b:52:0c:91:ec:f9:90:
                    57:e1:92:5a:d6:d4:b0:74:5f:65:8f:9e:99:c3:7a:
                    30:44:95:fc:9f:bb:51:7b:b4:48:a9:83:b5:3f:53:
                    a3:4d:2b:c1:36:a5:d5:e5:72:f4:01:09:0c:d3:38:
                    9a:d0:b0:f1:ae:f2:36:85:a9:fa:8a:3d:a3:03:35:
                    1a:73:3e:a7:07:5b:32:65:b4:ad:c7:63:b1:6f:64:
                    5e:d5:31:21:ab:3c:d7:29:da:e5:b8:05:3b:9c:16:
                    06:d8:ba:27:e1:ac:09:48:49:c9:79:4e:5f:ce:97:
                    3c:a2:2d:de:5a:29:f4:bf:35:db:b0:b6:44:52:0e:
                    5d:29:a6:df:58:aa:b8:cc:cb:df:4c:1b:7a:42:56:
                    42:7a:7a:d2:45:0f:5e:2d:51:f6:11:27:86:17:c7:
                    ab:6e:0a:1d:02:0f:e8:6b:4b:20:56:6c:d8:4f:d1:
                    7c:c1:78:33:6d:37:55:56:8d:6c:15:54:ce:34:ad:
                    89:6a:4e:38:a4:a5:c8:e1:bc:9f:22:8f:53:d0:f6:
                    6f:6a:3b:56:a7:2d:50:0a:85:a3:80:4e:37:0e:dc:
                    d6:c6:83:c3:cd:42:b8:83:c8:d7:eb:16:83:0f:c0:
                    31:92:cf:ab:c8:80:65:15:dd:7f:5a:7e:e1:b2:29:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154641

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:f6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:b0:e6:03:90:c0:d9:47:99:60:21:58:90:76:1e:6b:3f:
         ac:2f:81:59:d4:b8:de:64:7c:e2:db:bb:a0:47:9d:fc:1c:af:
         57:df:6c:8f:8a:cb:51:70:70:12:56:f6:60:52:16:cd:28:7d:
         97:70:6d:55:05:c0:2d:91:e1:88:af:93:ab:3e:46:a5:f6:11:
         90:c1:bd:08:75:77:35:ed:4e:0e:ee:5f:15:5a:1b:93:be:1f:
         fe:ac:d6:29:84:d2:be:23:12:47:17:e9:e7:5f:74:ab:14:e8:
         28:08:44:20:43:8a:17:2e:15:f1:d4:d8:ef:98:f9:b7:db:9d:
         3e:c4:b6:45:48:39:8c:60:0f:d6:c7:23:66:9a:f6:81:a9:c5:
         65:a1:71:72:56:56:17:17:87:d2:9c:94:7b:5e:b4:4c:db:47:
         74:02:e1:ab:ad:6b:3e:35:ec:da:6b:ef:f6:d6:c6:8e:dc:07:
         bd:91:da:4d:b0:5c:c3:55:47:0c:6f:6b:73:ce:5a:39:2e:7c:
         85:cf:d0:b7:ac:e0:4a:ec:3d:16:20:bd:f5:12:ca:d8:6d:7f:
         7e:75:9d:49:57:aa:c0:f5:47:e1:ff:97:2c:dd:7f:79:b0:19:
         85:69:f5:a5:40:e5:00:b2:ba:ef:56:b8:e1:5e:fa:e1:b0:85:
         b1:02:57:9a
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAq4dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMjA5MzA1M1oXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDRGQTIxMTAvBgNVBAUTKDZEQTczRkI3QzE2MzgyMzQ4QkZGOTBB
OUY0RTMyRDRCRThCQ0MzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe1MJUJqPDm1IMkez5kFfhklrW1LB0X2WPnpnDejBElfyfu1F7tEipg7U/U6NN
K8E2pdXlcvQBCQzTOJrQsPGu8jaFqfqKPaMDNRpzPqcHWzJltK3HY7FvZF7VMSGr
PNcp2uW4BTucFgbYuifhrAlIScl5Tl/OlzyiLd5aKfS/NduwtkRSDl0ppt9YqrjM
y99MG3pCVkJ6etJFD14tUfYRJ4YXx6tuCh0CD+hrSyBWbNhP0XzBeDNtN1VWjWwV
VM40rYlqTjikpcjhvJ8ij1PQ9m9qO1anLVAKhaOATjcO3NbGg8PNQriDyNfrFoMP
wDGSz6vIgGUV3X9afuGyKeBpAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUbac/t8Fj
gjSL/5Cp9OMtS+i8wx4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ0RkEyLzY5MTIyMzcwM0QzRTExRjE4QkQyNzgzQTlGODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENEZBMi82OTEyMjM3MDNEM0UxMUYxOEJEMjc4M0E5RjgzMzc3My9iYWNfdDhG
amdqU0xfNUNwOU9NdFMtaTh3eDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlwRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9vbAMA0G
CSqGSIb3DQEBCwUAA4IBAQBP5bDmA5DA2UeZYCFYkHYeaz+sL4FZ1LjeZHzi27ug
R538HK9X32yPistRcHASVvZgUhbNKH2XcG1VBcAtkeGIr5OrPkal9hGQwb0IdXc1
7U4O7l8VWhuTvh/+rNYphNK+IxJHF+nnX3SrFOgoCEQgQ4oXLhXx1NjvmPm3250+
xLZFSDmMYA/WxyNmmvaBqcVloXFyVlYXF4fSnJR7XrRM20d0AuGrrWs+Nezaa+/2
1saO3Ae9kdpNsFzDVUcMb2tzzlo5LnyFz9C3rOBK7D0WIL31EsrYbX9+dZ1JV6rA
9Ufh/5cs3X95sBmFafWlQOUAsrrvVrjhXvrhsIWxAlea
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:47 2026 by rpki-client