Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
File:                     NjEWXebubQcy5I-6Klzn3KjUA3w.cer (raw, json)
Hash identifier:          uBgrXxaQ7OKSurYksRMlRogU5t1T8hwr6Nmy3nRKChY=
Subject key identifier:   36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C551
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Jul 2026 02:00:06 +0000
Certificate not after:    Thu 31 Aug 2028 00:00:00 +0000
Subordinate resources:    AS: 133581
                          IP: 103.43.229.0/24
                          IP: 2001:df2:2f00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 23:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181585 (0x2c551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 16 02:00:06 2026 GMT
            Not After : Aug 31 00:00:00 2028 GMT
        Subject: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:ca:0f:56:f5:5f:92:3b:9a:57:e8:07:43:
                    47:97:55:81:6f:4b:73:5b:2a:ee:55:55:3b:db:ee:
                    c4:b1:a7:db:47:ea:99:a8:48:b2:b6:e6:f2:49:27:
                    25:15:98:6c:f1:6e:65:c1:7d:d4:b4:a3:58:6f:e7:
                    ca:ec:42:40:10:55:ab:e3:f0:80:95:cc:45:25:fe:
                    e1:5f:7a:71:63:b5:01:5b:e9:52:eb:e8:28:24:7e:
                    06:a0:6a:7c:00:15:c3:23:49:fd:d0:72:e2:ce:83:
                    81:4a:73:35:3b:6f:68:0e:a9:49:63:b7:3e:97:7d:
                    e2:08:12:e8:12:29:41:ea:ec:64:4c:e4:06:6c:ec:
                    de:4c:c3:5d:2f:dc:83:7e:fd:da:71:e4:00:fa:9d:
                    26:cb:99:2d:29:5f:b7:c1:56:66:5f:83:8f:6c:0f:
                    e0:f9:39:68:69:ac:e0:c4:83:05:2a:ea:f7:bc:c2:
                    87:f7:3b:07:b7:2f:3d:69:e4:62:8f:40:12:74:2e:
                    4b:02:8e:f2:a4:b4:21:1d:47:94:25:d3:87:cc:f4:
                    fb:c7:e2:08:c1:ea:9b:9e:46:d7:1d:29:fd:45:62:
                    9b:0a:e2:62:76:b5:04:fc:e8:a6:d9:29:ae:60:82:
                    d3:9e:03:6e:37:52:07:ac:98:be:93:de:9a:f0:b1:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133581

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.229.0/24
                IPv6:
                  2001:df2:2f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:5e:fb:11:20:0e:21:28:ca:b6:7c:62:1b:a0:60:fd:bc:
         8d:9a:82:35:96:1f:d7:39:72:e7:c6:ca:51:d1:63:51:69:58:
         cd:13:81:30:fb:d8:d9:b2:89:80:5d:06:6d:f7:c1:65:ac:b7:
         bb:3f:36:b9:11:f4:08:f4:14:cd:aa:7a:60:d4:7c:85:72:26:
         c4:18:30:78:c7:80:56:4b:96:42:62:8a:cb:3e:13:af:0c:ad:
         3b:99:dd:59:23:1c:8c:5e:63:39:a2:06:87:0d:fe:94:ee:cf:
         46:68:9e:58:5c:b8:30:c1:6b:87:02:c6:09:64:5a:5d:1e:3c:
         aa:42:10:bc:ed:1c:2f:ab:24:ac:d2:85:2b:5c:74:d4:03:1a:
         fe:fc:5a:d2:9c:d0:77:a1:b7:a2:68:a4:30:8b:2f:98:c1:80:
         31:be:25:b0:86:1a:b2:91:0e:7e:4b:f9:95:be:89:7d:08:e9:
         bd:07:78:c8:0e:00:39:13:ed:a7:2f:cf:16:14:99:68:cd:b2:
         2f:05:b9:d5:b4:bc:54:ad:10:16:4c:0e:96:71:69:e6:f5:7d:
         01:c5:24:33:8d:d4:2e:fe:a2:0e:53:80:42:bb:a5:ee:f0:a4:
         f4:ea:42:33:0e:37:7e:9f:a8:47:4a:30:9c:81:9a:d2:ad:7c:
         d2:ec:97:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:33:25 2026 by rpki-client