Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
File:                     M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer (raw, json)
Hash identifier:          EZ8Mb+afddZCFyfT+M2zK60H06dDL1ZmALEMZ1WdcvM=
Subject key identifier:   33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CDFC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Tue 18 Aug 2026 12:46:46 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 135532
                          IP: 103.223.184.0/22
                          IP: 2405:a180::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183804 (0x2cdfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 18 12:46:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:73:93:cf:89:86:c9:25:7b:65:b3:ee:7b:
                    dc:01:16:7f:d9:a9:71:d7:01:12:55:b3:45:7e:6a:
                    d6:0d:ff:42:82:8e:d0:0f:9c:9a:e0:8b:0d:92:12:
                    68:ac:7a:ab:c9:0e:4b:df:4e:ef:de:e0:8a:ab:09:
                    56:64:d6:e5:80:74:e7:e5:3a:84:92:8e:13:28:ec:
                    5a:44:26:61:77:f5:6b:25:1c:d3:cd:29:af:ff:29:
                    35:d7:fb:69:39:f3:ec:76:07:82:d9:eb:94:9d:a6:
                    4f:44:ae:37:35:3f:d9:48:90:49:63:d8:f5:dc:fb:
                    bf:61:56:4c:20:2f:57:f5:5e:ad:c3:91:ac:1e:8c:
                    44:61:82:c2:9b:cd:40:90:eb:89:0f:40:22:28:1f:
                    4e:30:f0:55:54:cc:a2:88:35:ab:dd:77:59:18:5e:
                    f6:f1:b4:1b:c3:fa:72:d6:1a:f2:dd:34:9a:dc:f6:
                    10:3f:e1:19:36:32:50:0c:e8:ae:48:01:35:74:a4:
                    b0:01:29:8d:8e:9b:fc:6b:4c:aa:9e:cd:01:52:1c:
                    ff:5e:64:0b:d0:86:5e:29:6b:65:8b:2d:b1:17:34:
                    3a:54:aa:72:90:46:b5:c5:0d:49:6e:ca:b3:de:d1:
                    00:83:13:23:58:f0:c8:0b:3a:29:2b:fa:47:44:82:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135532

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.184.0/22
                IPv6:
                  2405:a180::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:2b:72:01:e3:7b:83:b8:26:44:b2:3d:6c:e3:18:da:6b:0e:
         8c:ce:e8:e5:97:b6:47:0e:ec:fa:e5:55:0f:1f:98:37:20:d0:
         43:f0:45:d8:d4:05:6c:c9:fc:8b:25:a5:66:40:05:90:63:f6:
         60:67:76:95:b9:dd:70:a2:3c:28:a2:18:8e:4b:05:12:74:87:
         c0:17:3b:08:69:76:dc:1b:28:f3:bd:65:c0:93:fa:4e:87:88:
         8e:13:86:6b:8f:22:37:01:a3:14:c8:3c:c5:fb:79:17:ea:8d:
         74:90:42:7e:bf:73:35:77:1c:c1:ef:ee:ce:ca:23:d1:f2:d6:
         de:14:a6:55:cb:6b:31:5c:3e:41:d6:bf:0f:51:ca:d5:03:70:
         a5:04:e3:f1:33:8a:fb:b1:05:4a:ae:25:92:f8:0c:14:3c:c0:
         6c:40:18:9f:26:46:76:28:96:d8:c7:09:a0:f7:55:4c:be:c9:
         23:76:2e:81:84:c7:88:71:48:03:6c:ef:df:fb:6b:c8:ba:32:
         d7:77:40:46:31:d8:bc:9e:b0:d7:a0:3d:86:ad:f8:be:e4:4d:
         ba:83:eb:c0:e7:62:6c:18:b1:30:db:f1:24:8b:19:c5:3f:40:
         6f:d3:69:d6:a9:66:59:61:2e:da:99:1f:f6:90:68:e8:44:6c:
         0a:69:00:91
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAs38MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxODEyNDY0NloXDTI3MDkzMDAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1N0ZBRjI2MTQy
ODI5RkFCRjIyNUFFQUU0MTczN0YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA689zk8+Jhskle2Wz7nvcARZ/2alx1wESVbNFfmrWDf9Cgo7QD5ya4IsN
khJorHqryQ5L307v3uCKqwlWZNblgHTn5TqEko4TKOxaRCZhd/VrJRzTzSmv/yk1
1/tpOfPsdgeC2euUnaZPRK43NT/ZSJBJY9j13Pu/YVZMIC9X9V6tw5GsHoxEYYLC
m81AkOuJD0AiKB9OMPBVVMyiiDWr3XdZGF728bQbw/py1hry3TSa3PYQP+EZNjJQ
DOiuSAE1dKSwASmNjpv8a0yqns0BUhz/XmQL0IZeKWtliy2xFzQ6VKpykEa1xQ1J
bsqz3tEAgxMjWPDICzopK/pHRIKtJwIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFDOf
+pM1f68mFCgp+r8iWurkFzfwMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0
OEJGNzAwMDAvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxNDhCRjcwMDAwLzAvMzM5RkZBOTMzNTdGQUYyNjE0
MjgyOUZBQkYyMjVBRUFFNDE3MzdGMC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAhFsMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ9+4
MA0EAgACMAcDBQAkBaGAMA0GCSqGSIb3DQEBCwUAA4IBAQDBK3IB43uDuCZEsj1s
4xjaaw6Mzujll7ZHDuz65VUPH5g3INBD8EXY1AVsyfyLJaVmQAWQY/ZgZ3aVud1w
ojwoohiOSwUSdIfAFzsIaXbcGyjzvWXAk/pOh4iOE4ZrjyI3AaMUyDzF+3kX6o10
kEJ+v3M1dxzB7+7OyiPR8tbeFKZVy2sxXD5B1r8PUcrVA3ClBOPxM4r7sQVKriWS
+AwUPMBsQBifJkZ2KJbYxwmg91VMvskjdi6BhMeIcUgDbO/f+2vIujLXd0BGMdi8
nrDXoD2Grfi+5E26g+vA52JsGLEw2/EkixnFP0Bv02nWqWZZYS7amR/2kGjoRGwK
aQCR
-----END CERTIFICATE-----
Generated at Thu Sep 3 07:07:54 2026 by rpki-client