Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
File:                     ep7epfyIL4Z-ujeIm807O7SsYjE.cer (raw, json)
Hash identifier:          dqlaimalkjG0hR+SMNIPJaHOijIKAMCza+lxJv471HI=
Subject key identifier:   7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C1DC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jul 2026 14:52:24 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 153885
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180700 (0x2c1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  1 14:52:24 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:2a:d3:e5:bb:ad:59:4f:d9:a9:e7:4c:b9:
                    85:fa:39:f3:25:85:f9:d0:06:2a:71:34:a5:b0:26:
                    13:42:46:18:60:8a:36:2d:7f:ab:66:82:20:9e:ce:
                    0b:94:71:9f:fc:b3:94:38:80:20:7b:fa:d0:42:12:
                    6f:ee:bd:12:9b:52:3b:41:30:93:c2:c2:9d:24:5f:
                    18:ba:34:9a:50:3d:4c:bb:9a:d4:b7:e2:85:7c:41:
                    72:e2:46:7c:cb:7c:6f:d5:d7:81:56:8e:aa:2b:67:
                    6f:79:d8:f4:8a:07:e7:fc:4c:ed:57:be:10:7a:fc:
                    d9:4a:49:49:36:92:36:c2:bf:a3:0a:45:39:e6:86:
                    03:22:9f:ac:a5:93:b7:46:27:53:c4:af:18:6a:40:
                    cd:79:0f:22:38:b5:80:13:3f:1f:7c:24:a9:b1:00:
                    47:6f:76:09:10:40:60:77:8d:70:2b:b2:62:5a:58:
                    2f:f4:1f:c4:f9:76:f6:74:de:96:f2:94:3d:b0:76:
                    e1:ff:d2:d9:85:ba:97:ff:28:3e:0b:df:55:b5:2f:
                    4e:06:09:44:31:a9:d6:c5:37:60:be:fd:24:37:51:
                    45:3c:1a:6c:31:a5:a2:0f:da:cd:c0:94:17:1f:9d:
                    28:a4:23:31:f6:74:bf:9c:7d:1b:a1:6f:96:85:1e:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153885

    Signature Algorithm: sha256WithRSAEncryption
         71:36:a0:0f:3c:ef:9c:1b:3a:da:07:d2:4d:b6:c3:aa:79:e7:
         ed:cd:f3:09:22:4c:d0:91:71:c2:d8:8c:d2:32:56:42:e4:f6:
         0a:7f:8c:cd:c2:e7:73:60:84:b4:8f:e7:01:85:25:20:fd:8f:
         91:b2:17:cb:46:f6:06:37:c3:24:fb:dc:a2:d9:db:58:cb:f7:
         2f:26:9a:50:37:47:73:3a:1a:58:09:14:9d:a8:c6:73:b3:4b:
         f5:54:ec:9c:1e:59:bd:d3:97:0e:14:1a:24:8f:a2:0f:e8:db:
         21:70:fe:07:4e:95:8f:90:50:ef:bf:4b:dd:e2:5f:bc:6f:19:
         85:78:32:27:2f:48:a3:99:9e:b1:c4:e1:e6:23:81:8a:9d:6b:
         0d:14:69:37:d6:4c:5c:80:6d:af:68:da:07:32:b2:b5:fc:9c:
         c4:71:6a:43:a8:e3:d4:ce:ec:27:c6:89:52:de:0c:4f:63:5b:
         07:cf:f8:73:7f:8a:b8:10:8f:9e:2e:c1:13:e7:aa:7c:0d:62:
         9e:f0:3f:e6:5a:7e:f3:b3:2c:40:28:5e:d7:05:11:33:38:de:
         cc:b0:76:d8:3d:9c:46:6d:1f:6d:30:ad:f0:55:a3:39:84:b2:
         08:3e:86:e4:9e:9a:15:45:fe:3b:a6:97:d7:12:a3:84:1a:c5:
         61:10:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:14 2026 by rpki-client