Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RS6--Wyz_yCweElU8KGAMKQzSs.cer
File:                     1RS6--Wyz_yCweElU8KGAMKQzSs.cer (raw, json)
Hash identifier:          VOV33D5lOz0llW2TQ2T3HfjrfOO5FRIrnPiUG2Q8PAA=
Subject key identifier:   D5:14:BA:FB:E5:B2:CF:FC:82:C1:E1:25:53:C2:86:00:C2:90:CD:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C50D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF179/1841F33E136E11F1962E0A9F313D8C67/1RS6--Wyz_yCweElU8KGAMKQzSs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF179/1841F33E136E11F1962E0A9F313D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Jul 2026 14:46:27 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 135558
                          IP: 103.65.232.0/24
                          IP: 2001:df2:9a00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 03:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181517 (0x2c50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 14 14:46:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91BF179, serialNumber=D514BAFBE5B2CFFC82C1E12553C28600C290CD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:b9:89:b4:60:14:a4:54:1d:e7:68:ce:85:
                    cc:5f:39:c5:61:25:ae:54:db:85:84:e4:f6:66:3e:
                    42:33:55:b1:35:6a:b9:68:b5:08:9a:63:05:48:de:
                    6e:00:d9:02:4e:22:9e:c1:a6:b7:43:d0:be:84:6f:
                    ec:a1:b2:25:c3:8c:f3:e5:09:cd:56:9a:42:cd:ab:
                    37:b0:11:d2:a0:70:cd:75:d1:8f:2e:57:70:1b:0c:
                    3d:b8:d4:43:fc:54:a9:ed:3d:af:40:0f:49:a3:2f:
                    2a:d4:ea:93:95:01:6b:96:3e:05:01:0a:04:e1:15:
                    0e:41:a0:63:32:28:4d:5a:a8:0f:c0:1a:f2:94:f4:
                    a7:17:04:9b:7f:0d:b4:93:69:22:9f:83:37:8e:33:
                    18:73:d2:2f:58:5b:fe:36:fb:96:04:d9:c5:66:81:
                    ca:52:b3:1d:40:28:86:0a:e5:ea:17:65:df:d8:94:
                    f0:fd:6e:37:cc:b4:bd:02:d0:26:1c:dc:1b:23:aa:
                    de:cc:ac:de:69:e1:c1:7f:66:25:27:5a:97:52:2c:
                    b5:5c:d4:e1:ba:94:e8:c2:66:d4:04:56:25:13:b6:
                    74:56:71:bb:fb:76:77:3b:8e:a5:fa:b0:5b:f9:0f:
                    27:1a:b7:f3:36:c6:0e:3c:dd:e3:8c:e0:00:7f:f4:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:BA:FB:E5:B2:CF:FC:82:C1:E1:25:53:C2:86:00:C2:90:CD:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF179/1841F33E136E11F1962E0A9F313D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF179/1841F33E136E11F1962E0A9F313D8C67/1RS6--Wyz_yCweElU8KGAMKQzSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135558

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.232.0/24
                IPv6:
                  2001:df2:9a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:67:61:a8:33:fe:85:f2:4d:ad:41:92:76:a5:bf:c5:ec:
         f4:49:51:b0:9c:65:ce:77:f8:60:39:88:d2:2e:1a:2f:ff:ca:
         2e:8e:65:8b:f5:7d:1d:ee:60:fd:b2:4d:92:96:ed:1e:38:5b:
         b5:cc:13:e5:f4:01:e9:df:a2:7f:72:b6:6b:78:93:6a:7f:98:
         87:26:35:e5:21:b3:95:d4:02:eb:56:9e:86:bb:83:e9:72:2b:
         4a:20:17:61:f3:a2:d9:69:4f:71:a1:4b:b8:a6:a2:3c:f7:ad:
         22:cf:13:4a:1a:5a:1d:cf:86:46:69:cd:bb:e2:57:8c:8c:2f:
         7b:f7:66:0b:1b:c7:a8:a5:3a:ce:c1:11:ae:87:92:97:26:6f:
         d1:97:b2:1f:c1:4f:43:bf:cb:88:10:c1:b9:21:c0:8c:4d:12:
         09:5d:8f:9c:5a:88:6e:98:4b:bc:22:cb:12:4c:77:87:60:ac:
         c2:43:96:18:98:f5:19:6c:ad:b5:ce:cb:fe:a4:c7:40:56:2d:
         3f:87:e2:94:6d:52:04:44:ca:a5:b3:a1:a0:6f:61:6d:6b:bb:
         47:fd:94:ff:f4:31:d0:df:06:87:a5:1f:b9:0a:0b:eb:41:05:
         65:b4:74:2d:b8:3a:ab:54:b7:22:81:91:be:e5:53:cf:b5:6d:
         23:57:99:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:23 2026 by rpki-client