Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
File:                     vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer (raw, json)
Hash identifier:          FaJO/B7n0jSNC5DF0l94P8Y2M0e/o0HutP77pVn95X8=
Subject key identifier:   BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A1D5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Mar 2026 07:32:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 142256
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 06:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172501 (0x2a1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  3 07:32:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:71:48:a1:da:63:db:7e:c0:20:e9:9f:7f:
                    e1:1a:6f:a5:9f:71:62:0f:b9:6a:19:3e:28:21:e9:
                    69:f1:08:c8:ce:78:37:58:61:6a:0e:99:28:28:bd:
                    39:a0:1d:97:cf:f7:9a:49:b6:37:c9:8e:94:d8:68:
                    73:9c:f4:8e:2f:e3:4e:8b:d0:24:98:58:45:41:0e:
                    c9:21:ee:c0:c0:76:16:ce:4d:67:3c:e5:4b:58:bc:
                    5c:ce:69:a9:d9:ae:bf:76:f7:4b:f0:69:63:e8:eb:
                    31:c2:73:e0:07:61:b1:ef:82:86:ae:0f:c6:3d:7d:
                    51:4c:1b:9e:1a:7d:53:b9:2a:41:b6:30:64:bc:a5:
                    c7:e6:d4:69:6c:17:17:6e:67:db:1d:26:4e:dc:ec:
                    6e:9a:91:ec:c7:9a:00:94:61:7f:cb:dd:87:a2:45:
                    c6:e3:1a:fa:c9:80:19:01:e7:af:94:b5:cf:cf:02:
                    f2:3d:a9:a2:47:08:8f:b2:e1:a9:59:0a:22:64:70:
                    2e:f6:17:13:35:52:48:ca:01:e4:95:85:d6:51:a1:
                    b2:d4:5d:dc:ed:9c:2d:f5:3b:cc:6c:5e:d6:70:85:
                    7b:9f:d7:b2:32:9b:1b:17:34:ee:10:eb:47:18:d3:
                    9f:71:b6:b7:53:ed:bf:f4:c9:55:e5:f4:ab:61:34:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142256

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:e9:ce:3e:62:df:c8:34:02:35:e5:e8:e8:d0:1d:b9:be:
         bf:2e:81:15:e7:dc:30:fd:0e:81:db:20:12:87:53:a1:00:df:
         b1:2c:c6:bc:a6:34:ac:a3:ff:69:e8:5e:37:c0:de:a3:9a:ad:
         88:15:13:10:78:b5:f8:4f:db:dd:68:75:c4:96:f1:0f:56:85:
         c6:cd:0c:38:70:4a:da:83:fd:5d:8d:30:e6:7c:f0:6a:38:c1:
         20:9a:f8:b8:92:40:e2:34:df:9d:ab:27:cb:83:6e:f0:75:72:
         2d:6d:80:5d:75:f0:0f:15:0a:5c:6f:cc:e2:0e:00:de:44:f8:
         54:16:0a:18:82:b0:7e:d4:97:0c:e1:9f:9b:58:71:7c:08:2e:
         63:a4:11:ee:a5:1e:97:eb:f8:f6:a6:8b:be:65:02:80:98:cb:
         75:5a:7b:25:9f:64:88:f2:e7:f3:72:63:ea:97:b4:ef:58:1a:
         50:cb:8f:b8:bb:2b:c4:39:25:61:6f:ed:23:4b:79:7d:11:9f:
         92:1f:2f:a9:b9:e5:5c:14:19:75:58:e5:02:63:54:f6:49:f9:
         00:ef:67:39:85:69:90:d4:ef:b1:4b:ca:d4:7c:be:8f:3c:90:
         f0:34:57:62:7b:ff:91:98:25:a2:aa:3a:a9:f3:be:e2:3b:6a:
         0d:5f:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:18 2026 by rpki-client