Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
File:                     -bj5HSkovqo1HMNFxHNpMv2GOfE.cer (raw, json)
Hash identifier:          rkKl2RepqLhpO2OQoe1hcxTcMpwK7vL3MFCSXAwJGtA=
Subject key identifier:   F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C571
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Jul 2026 13:55:53 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 139016
                          IP: 103.138.150.0/23
                          IP: 2001:df0:4080::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181617 (0x2c571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 16 13:55:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:ed:47:b0:09:ae:39:cc:d7:fe:b5:3d:41:
                    2b:70:9b:f0:92:ff:ce:20:15:aa:81:b5:b8:67:b1:
                    18:df:1d:aa:ef:72:dc:58:ba:96:58:ae:1a:63:e1:
                    3c:55:8c:73:8b:98:ba:e2:87:0d:ef:6f:cf:73:75:
                    8c:11:d0:b3:e2:24:22:9a:fe:7c:b1:3d:56:37:0d:
                    99:79:86:2a:88:a9:db:7a:27:5a:4a:8c:9b:d9:83:
                    6b:d4:e0:a8:07:bf:ff:b1:e2:a5:be:72:a6:c8:d3:
                    18:88:b6:00:a6:de:30:6d:e1:f4:21:20:12:15:ac:
                    db:49:1d:6f:0e:55:06:ab:5b:fb:65:a6:ba:34:a3:
                    4e:03:83:29:b5:56:5e:e8:97:6e:11:01:4c:cc:03:
                    30:41:a2:c0:9b:2e:7d:6b:e4:96:5c:31:cf:39:08:
                    ec:f6:c1:db:1a:5e:e5:b2:d6:c2:ee:8f:62:1d:5c:
                    e4:ec:48:22:2b:04:1f:99:6e:91:28:d4:92:b1:c8:
                    01:41:21:58:60:8a:2b:eb:61:a5:d9:e0:f5:9a:cf:
                    cb:83:f5:5a:2b:dd:b6:f4:0d:16:df:a8:90:00:6a:
                    79:65:f1:9a:dc:47:32:8e:1a:af:c7:57:59:c1:f2:
                    0d:b4:43:99:5d:c5:df:ea:b9:26:2a:cf:ad:4c:3c:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139016

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.150.0/23
                IPv6:
                  2001:df0:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:d3:50:d1:68:1b:b8:2b:75:36:e6:ee:79:ca:0c:31:41:e1:
         35:02:6d:e2:f6:bb:1e:b3:4d:b0:7e:62:cc:d8:62:0a:7e:37:
         7b:00:45:4f:fd:57:bd:6d:1a:f4:17:63:54:a0:e0:69:be:50:
         77:a3:4e:50:95:0e:2d:96:6d:ed:90:2b:1b:da:2b:35:5f:ce:
         a5:7a:1a:7c:13:b6:50:46:e6:69:62:b1:53:5f:61:0a:20:8e:
         7e:a3:62:49:37:3a:ff:8b:d8:aa:22:73:c3:07:6e:49:88:3d:
         5d:f6:30:03:c3:12:33:b3:42:23:35:87:7b:cb:78:c0:af:e0:
         f2:6e:fa:ef:e9:eb:de:4f:9c:b3:fd:57:b6:e6:8d:03:03:1f:
         2e:18:62:76:36:09:3d:56:4e:36:26:a9:16:10:62:bb:7c:02:
         39:25:0a:8d:4a:16:1a:de:82:d5:e0:b3:58:08:f4:e8:13:61:
         2a:08:15:5d:46:25:8c:2a:9a:d9:c8:59:c2:81:b5:29:37:12:
         22:1f:e9:24:6d:21:ae:9b:53:77:24:ee:28:c7:cb:75:7b:8d:
         14:7c:b1:00:5d:aa:86:18:c5:0c:b5:55:fb:81:4a:a7:22:de:
         c3:d6:7d:ad:36:b7:4f:52:f5:93:69:db:40:01:f7:7e:46:1b:
         50:22:d2:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:11:09 2026 by rpki-client