Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
File:                     -soSQJs8JskJ3Pqy874emPzo2oA.cer (raw, json)
Hash identifier:          52OqU4L9qALryeBY5goPTCG0neThwu90TBxCfIEsvzw=
Subject key identifier:   FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CB3F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 10:16:40 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 134366
                          AS: 140882
                          IP: 45.120.216.0/22
                          IP: 103.61.36.0/22
                          IP: 103.152.210.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183103 (0x2cb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 10:16:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:a9:bd:5c:bb:b4:7c:5a:7a:73:73:9a:93:
                    bc:64:06:00:9e:a0:ca:8e:ae:28:ed:d2:66:b3:5f:
                    79:8f:52:09:48:8b:f9:58:19:4c:79:d5:9b:46:76:
                    99:54:22:3c:bd:b7:51:8a:8d:2d:c3:64:29:53:83:
                    a4:7e:96:d1:61:67:3a:c0:53:2d:a8:a0:01:b9:f5:
                    c7:96:ca:8f:e8:82:00:a4:10:66:d9:6c:91:2e:9d:
                    e5:56:ba:2d:c8:d8:52:6e:02:ad:ee:86:9a:5f:04:
                    b9:87:fb:be:74:48:34:fe:c4:c9:22:c5:d6:b4:ba:
                    6d:99:b8:ab:d9:2b:da:38:11:f9:9e:73:28:7d:44:
                    09:34:a8:61:ad:01:4d:92:2e:7b:85:e2:a4:66:c5:
                    cf:ce:37:99:62:d8:be:81:b5:41:5f:12:b7:fd:27:
                    31:48:67:d5:fb:f5:df:f8:53:87:dd:83:59:72:d6:
                    2d:d3:fc:a8:d9:49:a3:6f:d0:f8:9c:4c:67:da:13:
                    62:47:3d:8c:ac:1b:68:2d:7c:c3:ac:2a:fe:c4:6f:
                    f3:73:33:1f:02:fe:5d:1e:f0:a9:7a:64:86:00:56:
                    79:88:b4:d3:cd:9e:39:31:a9:53:eb:42:66:d7:ff:
                    7c:f4:4a:ff:9c:15:0d:1e:74:cb:f1:7a:01:93:f2:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134366
                  140882

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.216.0/22
                  103.61.36.0/22
                  103.152.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:21:e9:64:f1:00:57:0e:5f:f8:ab:17:3c:de:35:11:4f:
         54:2a:b3:15:a7:5a:41:1c:7e:f6:c6:86:7f:ae:3e:2f:6c:90:
         77:c8:5f:f0:f4:f9:af:9a:d0:35:0c:de:9a:cc:4a:08:9c:48:
         db:8b:31:f1:34:16:9c:85:04:f9:51:4d:92:e8:47:0a:d4:8f:
         e2:81:ec:fb:78:94:42:a8:26:8e:d8:25:c4:f7:5d:a5:0b:07:
         3b:e4:45:09:f5:f4:6b:c4:9d:38:9e:b4:73:29:2e:ea:a5:62:
         5e:88:62:58:a6:2c:02:e3:a6:08:8c:52:24:c3:2b:0d:2b:3b:
         12:7e:01:7c:db:31:d5:b1:ac:74:21:62:53:7e:67:5d:5b:bc:
         18:ec:7f:9e:a6:6c:19:ef:40:88:a2:28:47:e4:49:a5:d8:66:
         75:f7:54:65:ed:a3:70:6e:42:1c:c6:dc:3e:f2:a1:e0:1d:33:
         30:4c:03:be:ab:61:d2:74:9a:c4:59:b3:0b:60:f8:85:1c:a7:
         fb:df:53:31:e6:2e:88:77:5b:7d:eb:45:99:74:0c:d7:f9:d2:
         06:17:d1:1f:78:f2:96:71:ca:f3:0e:fa:ed:91:4b:82:c7:81:
         8a:26:63:75:f8:e7:1e:e4:35:a1:14:d5:69:c3:53:d3:3e:db:
         5e:ce:00:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:15 2026 by rpki-client