Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
File:                     -rpT9D2gDiGn6veS1I_bdpV6gLw.cer (raw, json)
Hash identifier:          Sx9utJUO4rxuO9pDM1xdwer+aL3XnQOf01dfG8Dl9To=
Subject key identifier:   FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C512
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Jul 2026 14:58:39 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 103.26.148.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181522 (0x2c512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 14 14:58:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:40:d5:7e:fa:90:1d:47:b7:55:0d:6c:8a:
                    0b:39:48:e9:b4:fe:24:d5:85:8c:d2:cd:71:2d:46:
                    3c:2d:52:a7:74:67:25:d1:8a:56:56:58:51:c6:b5:
                    55:91:8c:b2:e3:3b:ec:c2:3b:72:2c:51:b1:35:ba:
                    d3:74:05:97:2e:a1:9a:d5:15:4f:02:86:bc:7d:50:
                    23:ed:4b:b3:7d:9b:7e:93:00:f3:a6:64:af:45:28:
                    61:88:67:c5:2d:a4:de:77:2e:07:b5:ae:b1:bb:80:
                    57:c6:50:c7:80:5b:16:54:2c:d8:cb:c8:39:77:06:
                    11:8f:3c:f7:6a:25:ff:79:f7:9a:18:88:70:6b:b0:
                    32:31:da:52:55:53:1a:43:28:3b:41:25:5e:d4:82:
                    77:5b:4e:6d:0b:fc:0f:7c:ab:64:95:6b:1e:7d:d4:
                    b0:e8:87:25:52:11:6f:1a:7e:a8:fb:de:da:07:4c:
                    dd:58:0e:8a:47:3f:66:e8:a1:09:70:47:e5:1b:6f:
                    2f:41:f0:3e:8e:8b:79:9d:b3:9a:fe:bb:30:f8:ee:
                    98:9b:7e:ab:80:68:f6:f7:42:3c:0f:63:f9:60:ae:
                    0e:e5:b1:c2:23:a5:77:99:02:01:47:d8:1f:ab:c3:
                    88:9c:cf:0f:92:b6:d4:3d:b9:01:2d:0c:47:29:be:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:47:88:59:86:0c:c5:4a:a6:89:cc:d2:20:df:09:72:fa:37:
         95:10:ac:2e:bd:6d:27:0c:dd:f0:94:b8:15:30:16:93:db:8e:
         a7:db:1e:48:f1:3a:9e:81:34:ac:05:fc:64:89:c3:41:f1:a0:
         51:8c:70:3a:c2:2b:f0:f1:8c:f2:61:32:17:5d:f9:86:33:98:
         d5:b8:3c:0c:4f:a5:e4:0d:8b:5e:0e:2a:c5:26:c6:cb:d0:5f:
         55:d8:01:7e:5b:77:e2:65:e6:fa:dd:af:90:ca:de:2b:7b:49:
         49:ed:3f:10:55:36:ec:b7:dc:54:1b:fa:a6:b0:96:ac:14:30:
         32:0d:02:bd:a8:6c:68:a9:7e:2c:c6:3f:6b:c9:0e:40:37:87:
         51:a6:a5:9c:16:84:33:77:da:ab:4e:e3:2d:13:b5:07:d6:07:
         5e:d7:fd:a3:96:27:46:1b:a5:77:53:d3:9e:c6:57:66:30:9e:
         8c:a4:28:de:ff:5c:bb:2c:7b:7e:c5:79:52:15:00:ab:c1:76:
         f6:a4:d8:95:93:b6:5c:6d:cb:c0:ee:9b:6a:df:b6:59:9e:54:
         7f:62:45:4d:ba:58:c0:9d:5b:f8:05:9f:64:94:1c:82:44:37:
         f1:96:a3:bf:86:34:2a:ec:31:f4:0a:52:6f:c9:b3:7a:95:dd:
         99:2f:09:04
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAsUSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNDE0NTgzOVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5
MkQ0OEZEQjc2OTU3QTgwQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMGkDVfvqQHUe3VQ1sigs5SOm0/iTVhYzSzXEtRjwtUqd0ZyXRilZWWFHGtVWR
jLLjO+zCO3IsUbE1utN0BZcuoZrVFU8Chrx9UCPtS7N9m36TAPOmZK9FKGGIZ8Ut
pN53Lge1rrG7gFfGUMeAWxZULNjLyDl3BhGPPPdqJf9595oYiHBrsDIx2lJVUxpD
KDtBJV7UgndbTm0L/A98q2SVax591LDohyVSEW8afqj73toHTN1YDopHP2booQlw
R+Ubby9B8D6Oi3mds5r+uzD47pibfquAaPb3QjwPY/lgrg7lscIjpXeZAgFH2B+r
w4iczw+SttQ9uQEtDEcpvlrVAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU+rpT9D2g
DiGn6veS1I/bdpV6gLwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQyNUU1L0VDQkYwMEU4OUI0QjExRUI5NzMwQTE1NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQy
Z0RpR242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJnGpQwDQYJKoZIhvcNAQELBQADggEBACVHiFmGDMVKponM0iDf
CXL6N5UQrC69bScM3fCUuBUwFpPbjqfbHkjxOp6BNKwF/GSJw0HxoFGMcDrCK/Dx
jPJhMhdd+YYzmNW4PAxPpeQNi14OKsUmxsvQX1XYAX5bd+Jl5vrdr5DK3it7SUnt
PxBVNuy33FQb+qawlqwUMDINAr2obGipfizGP2vJDkA3h1GmpZwWhDN32qtO4y0T
tQfWB17X/aOWJ0YbpXdT057GV2YwnoykKN7/XLsse37FeVIVAKvBdvak2JWTtlxt
y8Dum2rftlmeVH9iRU26WMCdW/gFn2SUHIJEN/GWo7+GNCrsMfQKUm/Js3qV3Zkv
CQQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:01 2026 by rpki-client