Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer
File:                     flxEJXLUsPmrZIiClNR_qz972zQ.cer (raw, json)
Hash identifier:          Ji+sa+LHgugc19FLTQd3s9avjfFVQ67WMNUg84KFUNU=
Subject key identifier:   7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A7C5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Mar 2026 06:46:47 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 103.245.157.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174021 (0x2a7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 31 06:46:47 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A916C243, serialNumber=7E5C442572D4B0F9AB64888294D47FAB3F7BDB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:67:a3:fe:3b:65:6f:4a:2c:fa:ac:f4:8a:
                    57:e0:f8:9d:9e:52:fe:f0:95:7d:2e:e4:ce:16:cc:
                    36:64:63:ea:72:3b:8d:94:32:97:7b:e1:db:aa:9a:
                    b1:0c:39:c7:12:9a:15:51:ee:a2:f8:ba:aa:89:65:
                    51:54:82:db:08:54:34:f7:73:22:71:27:f1:e7:fe:
                    d4:22:37:6c:f4:92:40:c0:fd:68:64:df:fc:46:6a:
                    de:eb:c3:63:6e:79:65:38:ff:12:29:da:3d:fc:fe:
                    0a:6a:be:89:ae:5d:50:3c:6a:0e:2d:f2:10:0d:cc:
                    3f:e2:fc:b7:f4:34:f0:73:8e:84:01:65:a0:15:82:
                    37:14:a4:2d:a4:2a:f6:33:c1:e4:da:99:d9:49:46:
                    42:92:e7:50:91:7f:72:a4:7f:11:31:d3:1d:39:eb:
                    e4:6d:a7:e1:58:06:a2:09:cc:da:59:46:39:b2:21:
                    89:02:92:23:4e:a1:1e:b1:7e:10:e7:a3:68:03:e8:
                    c5:7c:cb:63:3e:e0:9f:81:34:8c:3c:62:ca:76:73:
                    ef:b2:53:45:49:81:66:94:76:f1:06:ad:79:70:69:
                    02:20:0c:c2:01:73:88:8d:09:96:b1:4f:2b:a3:1c:
                    76:0f:5d:50:92:0a:2b:43:16:89:09:e7:87:08:15:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:d6:24:3e:07:69:c0:4a:a6:83:3b:e8:b1:2b:67:2a:c8:
         b1:b2:c8:f3:1e:9f:0f:7a:85:70:e9:48:33:a8:d5:9a:1f:c7:
         fb:d4:6f:36:1b:3b:bc:fc:1a:fb:b0:1f:ea:33:a0:af:c0:44:
         da:bd:71:b1:42:d4:aa:03:c2:a9:61:54:d8:3e:25:e4:a3:17:
         6d:72:43:d8:ed:38:7c:ea:12:f7:df:24:6a:af:3e:b0:05:a7:
         dd:e1:ef:c4:39:4a:5d:d3:9f:68:41:48:6d:d8:32:e1:45:b9:
         dd:e8:3c:b2:a7:f4:34:b5:06:87:fa:86:6f:25:83:42:c9:ad:
         05:c4:03:1a:49:d6:6e:be:38:4f:c4:67:46:e9:c5:f3:02:c0:
         d4:20:0f:f2:43:bf:c0:da:c5:7e:63:1d:63:69:b7:51:ec:cf:
         13:21:d3:5a:be:02:24:49:40:95:43:81:09:2e:03:f9:33:76:
         44:70:43:42:28:91:ae:cf:1d:46:22:c9:2c:b1:91:02:55:b6:
         3d:3f:7f:c0:55:86:a8:e9:85:0c:6c:bf:bf:2e:f9:0b:7b:ac:
         90:51:eb:03:87:13:c6:49:e1:56:d5:f1:cf:e9:e3:26:dd:28:
         25:9f:ae:93:92:a5:35:0e:a9:ad:5d:55:17:5e:ca:a1:e3:e9:
         ab:d8:c1:1d
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAqfFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMzMTA2NDY0N1oXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkMyNDMxMTAvBgNVBAUTKDdFNUM0NDI1NzJENEIwRjlBQjY0ODg4
Mjk0RDQ3RkFCM0Y3QkRCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuLGej/jtlb0os+qz0ilfg+J2eUv7wlX0u5M4WzDZkY+pyO42UMpd74duqmrEM
OccSmhVR7qL4uqqJZVFUgtsIVDT3cyJxJ/Hn/tQiN2z0kkDA/Whk3/xGat7rw2Nu
eWU4/xIp2j38/gpqvomuXVA8ag4t8hANzD/i/Lf0NPBzjoQBZaAVgjcUpC2kKvYz
weTamdlJRkKS51CRf3KkfxEx0x056+Rtp+FYBqIJzNpZRjmyIYkCkiNOoR6xfhDn
o2gD6MV8y2M+4J+BNIw8Ysp2c++yU0VJgWaUdvEGrXlwaQIgDMIBc4iNCZaxTyuj
HHYPXVCSCitDFokJ54cIFf8xAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUflxEJXLU
sPmrZIiClNR/qz972zQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZDMjQzLzYxMDFCNUU2MkNDRDExRjE4NjM0NjBBQzkyODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QzI0My82MTAxQjVFNjJDQ0QxMUYxODYzNDYwQUM5MjgzMzc3My9mbHhFSlhM
VXNQbXJaSWlDbE5SX3F6OTcyelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBABn9Z0wDQYJKoZIhvcNAQELBQADggEBAHKx1iQ+B2nASqaDO+ix
K2cqyLGyyPMenw96hXDpSDOo1Zofx/vUbzYbO7z8GvuwH+ozoK/ARNq9cbFC1KoD
wqlhVNg+JeSjF21yQ9jtOHzqEvffJGqvPrAFp93h78Q5Sl3Tn2hBSG3YMuFFud3o
PLKn9DS1Bof6hm8lg0LJrQXEAxpJ1m6+OE/EZ0bpxfMCwNQgD/JDv8DaxX5jHWNp
t1HszxMh01q+AiRJQJVDgQkuA/kzdkRwQ0Ioka7PHUYiySyxkQJVtj0/f8BVhqjp
hQxsv78u+Qt7rJBR6wOHE8ZJ4VbV8c/p4ybdKCWfrpOSpTUOqa1dVRdeyqHj6avY
wR0=
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:27:51 2026 by rpki-client