Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
File:                     zHlrmVsFkPGFeCONcFkd1SRJXVA.cer (raw, json)
Hash identifier:          2wxil1AqOoiIEyre0avKr9VrVY15CFFFZCgArzSmTYk=
Subject key identifier:   CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C358
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 Jul 2026 01:39:12 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 132263
                          IP: 2402:64a0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181080 (0x2c358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  7 01:39:12 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9132336, serialNumber=CC796B995B0590F18578238D70591DD524495D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:98:fc:e6:2f:6e:b5:52:52:c1:58:42:99:
                    39:2a:9e:af:1e:d5:bd:d8:1d:75:0b:80:7b:26:c1:
                    73:b7:05:11:40:2a:3a:cb:a6:1e:93:df:c4:29:53:
                    4e:3e:1e:22:59:dd:24:7d:95:61:d1:c9:2b:76:a9:
                    3a:d7:fb:be:5b:46:f0:bf:49:fe:68:75:cc:c6:6d:
                    a9:ce:24:28:ad:60:de:06:1a:31:3f:92:e1:7a:a8:
                    f2:49:24:43:38:c8:30:27:45:d0:45:03:db:a5:b5:
                    bd:9a:85:60:1a:aa:49:65:a9:9b:64:52:6a:77:95:
                    d9:37:11:fc:ba:46:49:ce:ae:88:c3:56:40:bf:62:
                    fa:d8:1f:da:92:e6:bd:6a:4d:43:02:94:f6:5e:07:
                    22:86:f4:f7:16:12:a5:f8:a6:36:d4:49:70:5b:e9:
                    b2:f0:66:5b:bd:43:34:f3:be:8b:9a:98:6d:e0:09:
                    1a:c9:fa:bb:5d:ea:3e:f4:44:a3:92:41:9d:de:b8:
                    30:08:5a:6f:45:17:2a:2e:c4:98:ff:58:12:84:c9:
                    4d:5d:cb:64:ae:c6:56:4f:59:a7:e4:a2:08:66:d4:
                    13:00:c1:fe:93:a9:26:fe:94:46:e5:42:36:66:1e:
                    4c:64:a9:28:4f:1f:6f:63:26:80:09:2d:ad:40:11:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132263

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:32:8e:53:7e:e3:f9:84:6a:84:6a:44:b5:57:dd:d5:67:5b:
         1f:d1:8e:71:2b:20:d8:b9:a6:5b:c2:fc:bc:e6:3e:48:df:4a:
         ed:65:87:04:c8:88:bc:48:b1:a0:52:b0:e1:d0:91:84:ed:a1:
         58:3b:e8:48:39:02:7f:09:d3:9b:c1:60:56:a6:ff:e3:52:a5:
         58:5b:16:3c:6a:81:05:2d:69:19:da:39:93:fe:d5:ed:5a:aa:
         4c:a1:44:95:74:1a:51:d6:99:7e:75:5d:c4:c9:77:1a:3b:51:
         c5:d1:d2:1c:5a:1c:80:cb:7a:e8:c6:1e:e8:fe:06:e1:7f:04:
         f0:60:b2:a1:ea:be:7e:b9:ff:bf:4c:bb:ad:a5:62:24:b4:6f:
         e8:8e:c3:3c:39:06:cd:a4:d3:21:90:6f:89:63:ad:b4:c8:ec:
         13:f2:8b:da:d8:6f:03:33:f2:3a:6f:52:21:a2:01:b2:f8:1e:
         1a:f0:1a:91:49:57:91:55:f1:fe:49:e8:e8:88:aa:91:9a:b4:
         ff:5b:3f:06:cf:cc:70:e9:0e:31:6d:55:9f:4e:5d:38:3d:5d:
         25:56:21:7c:fa:6e:2a:da:1c:4f:90:64:28:1f:b9:d4:e2:ed:
         bb:60:5b:6d:6c:e7:d4:a5:31:be:55:8b:9f:41:b7:32:8e:34:
         de:a6:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:06 2026 by rpki-client