Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
File:                     hpeZugq_YN3ywa2PwMH2YASWqRY.cer (raw, json)
Hash identifier:          FXL0DNpV01oIoiP4V2ZlSLuywf5876cwac8mLYJ4RKQ=
Subject key identifier:   86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B264
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 05 May 2026 08:50:09 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 55493
                          IP: 202.128.106.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176740 (0x2b264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  5 08:50:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:fb:f4:f5:0d:b3:4b:ed:4d:b6:86:cc:0a:
                    4d:dd:af:2b:7b:78:24:84:a2:f0:64:37:cf:f1:c5:
                    02:3a:0f:82:55:c9:43:a3:c4:d9:52:4e:cd:fe:a4:
                    57:8a:62:bf:a8:3c:a6:ad:57:65:7a:84:f0:73:67:
                    bf:15:01:09:c3:7a:69:4d:6f:ce:0e:bf:c4:62:81:
                    78:d6:bb:61:18:85:e5:d8:18:e4:14:27:1e:87:6e:
                    0f:f4:7a:d2:cd:a6:f6:b3:e3:d7:e6:bd:70:94:57:
                    74:74:da:a9:f0:5f:f4:92:f4:85:9d:1f:35:ff:6d:
                    e7:18:5a:2f:04:f3:3f:7f:cf:96:76:66:a4:7a:dd:
                    94:27:d2:69:4a:f7:09:b7:20:b4:2d:d7:f2:33:11:
                    ad:77:03:e9:6e:da:e0:16:89:70:88:4e:82:11:38:
                    c0:39:f3:ed:9a:cf:14:dc:54:75:0d:c3:bd:bd:3b:
                    c0:9b:33:ef:65:b2:3d:41:86:7e:41:fc:38:27:f0:
                    75:fb:02:6b:a6:13:a2:a8:f1:ad:8b:bf:65:d1:f5:
                    fb:a5:36:19:0c:9d:d1:85:12:2d:a0:2e:60:c1:1b:
                    59:a2:66:11:ce:cc:4a:ed:69:a2:05:e7:7d:ab:cf:
                    51:f9:e3:97:7c:2a:da:38:66:93:e5:29:b7:27:a2:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55493

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:74:30:93:59:2c:8f:e5:5f:82:2a:ac:1e:9d:8e:6f:41:
         e1:19:72:4c:89:d5:35:24:2a:7a:27:fc:f3:86:e7:97:27:a9:
         12:6e:7f:5f:4a:d5:af:49:49:9c:73:33:27:be:5b:78:dc:c8:
         e5:ae:ce:de:f5:80:51:2a:67:f3:89:69:7c:1b:4c:3c:5c:d5:
         74:46:18:af:70:0f:b3:1e:c1:65:6e:20:e7:5e:1b:55:c9:a9:
         32:5b:48:2e:a2:28:6f:c1:ba:11:93:a3:19:e3:02:bd:9f:ca:
         ed:f0:50:27:da:f0:91:89:57:f8:18:59:24:aa:65:ff:b4:17:
         9a:60:43:86:db:0a:e4:b4:45:30:7c:1e:25:c5:3a:94:89:3e:
         bd:e0:e7:a0:89:d6:ab:ef:27:36:c5:77:26:a1:e8:6c:b0:48:
         93:e9:32:ae:6f:4d:b1:2a:5a:fe:4e:90:17:94:20:6b:f9:4a:
         8e:d9:33:6a:ec:ec:bc:8c:a4:00:37:35:0a:26:22:30:07:9a:
         17:86:2f:d2:c8:90:ef:cf:61:e8:f9:0a:c4:30:05:d0:1e:3c:
         48:39:34:36:83:c7:01:75:64:f8:3a:5a:22:2b:b3:22:4b:ec:
         ac:6b:f4:6f:ed:3c:29:f5:d5:41:0e:ef:10:b4:4c:8f:53:2d:
         d3:65:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:24:00 2026 by rpki-client