Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
File:                     6uK86DXkKxFfGLP-Do8n-EpHSZY.cer (raw, json)
Hash identifier:          p7ueVCsMPqLLKCQ26UjSSqUuAX5lLLpD2OPVO2k5i4Y=
Subject key identifier:   EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CDF8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Aug 2026 12:33:13 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 151404
                          IP: 103.68.106.0/24
                          IP: 2001:df2:9440::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 17:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183800 (0x2cdf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 18 12:33:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:68:d8:72:a7:e6:ef:a4:ff:d4:65:36:95:
                    fe:30:3b:72:e8:cf:9f:b2:d9:0b:fc:0e:6f:7d:41:
                    d9:0e:82:c4:a9:31:69:d3:80:10:fd:43:87:81:df:
                    ff:1c:d4:95:e5:81:79:d7:fd:ca:c9:b3:8a:3e:ef:
                    8f:23:59:7e:81:e6:0a:d3:0f:95:94:26:cd:e0:ec:
                    74:e4:66:26:0e:fc:a2:7e:d9:eb:91:82:c1:0d:69:
                    5c:cd:9c:e2:64:af:34:67:a6:30:a7:b4:c4:6b:1a:
                    45:55:b0:3e:2e:29:d2:11:3b:b3:58:ae:b8:04:b3:
                    0d:0a:bc:bb:a7:32:fb:83:8c:0d:83:7b:3c:9c:c9:
                    89:64:2a:33:89:6f:24:93:9d:08:c8:db:e2:94:9e:
                    97:09:96:4b:6d:4b:98:5e:69:df:fd:55:88:4d:de:
                    5c:a8:05:46:cc:f7:c9:05:74:5b:e0:1c:1e:05:de:
                    f8:0a:8e:82:08:e8:38:ed:45:ef:46:4e:6d:b1:f6:
                    6d:d5:e8:57:2a:66:39:1e:69:e3:25:23:29:2c:27:
                    6d:da:79:c1:f7:92:9c:e4:aa:2e:a7:58:38:c5:0d:
                    46:64:09:28:e3:fb:65:7a:77:97:60:0d:99:c5:ad:
                    3b:08:0b:df:e1:61:13:66:dd:b0:34:f3:bd:e3:26:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151404

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.106.0/24
                IPv6:
                  2001:df2:9440::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:42:34:a8:bc:f9:c3:d1:7a:74:14:25:3d:24:3f:ce:d6:
         f6:6c:92:1f:23:b9:42:c8:f9:1e:76:9a:8c:37:48:68:3b:98:
         ba:8e:96:c6:ab:37:05:16:40:ed:71:7c:7a:da:8f:54:30:3e:
         88:90:d3:06:a9:bc:48:29:e4:3e:cf:7c:79:a8:b0:a6:02:fa:
         2b:f9:18:5e:30:6c:9b:63:37:95:95:ad:2b:42:89:5a:04:fb:
         76:d9:53:6d:24:37:43:48:e3:7c:db:8c:62:fd:c5:c2:6e:58:
         f7:04:eb:62:6f:08:b2:cb:c0:7d:aa:7c:93:e7:eb:fe:97:93:
         e6:40:8a:59:c6:8e:3b:90:15:4e:da:4d:22:42:31:06:38:ef:
         ae:69:0e:2d:d5:41:a9:d3:07:86:75:52:83:ed:24:d6:76:45:
         1d:9f:d7:a3:db:cc:25:38:80:63:b5:41:73:04:93:31:6a:a8:
         75:f0:87:81:51:f5:bd:5d:a3:7e:6d:7b:58:cc:c6:6b:db:a5:
         2a:d9:ae:95:29:05:d9:f9:fd:bc:81:7a:01:05:05:cf:ba:70:
         cf:54:38:27:d9:bf:d5:ac:a4:e6:c6:41:71:82:cd:42:54:fd:
         c0:12:09:ce:58:da:7c:69:1b:6d:93:01:7a:8b:88:ed:4b:3d:
         41:fa:3d:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:06:32 2026 by rpki-client