Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WO00XGpI5t9mZgekGpERoFnvCY.cer
File:                     1WO00XGpI5t9mZgekGpERoFnvCY.cer (raw, json)
Hash identifier:          CVYoUg5eEsaXCE9GtUIz9NK92WcW3ofEbMFJsveU++0=
Subject key identifier:   D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D84E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 24 Sep 2026 18:55:43 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 136498
                          IP: 45.251.228.0/22
                          IP: 103.220.204.0/22
                          IP: 2407:5c80::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186446 (0x2d84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 24 18:55:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A916D23A, serialNumber=D563B4D171A9239B7D99981E906A44468167BC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:a4:1d:a3:09:ea:07:09:e7:f1:cf:20:0f:
                    d1:2f:84:f9:ec:fb:ef:73:3f:1d:18:33:8a:44:31:
                    0d:4e:68:54:61:08:64:cf:c5:bc:41:69:40:b7:9a:
                    40:6f:3f:21:da:25:fb:65:13:09:8f:0d:ba:d0:11:
                    a7:72:45:0f:53:17:c0:52:19:2e:3b:30:80:11:23:
                    cf:72:29:52:6d:9c:0c:b5:09:09:7b:65:eb:60:95:
                    96:2b:02:53:26:15:a7:72:3b:76:e7:b8:3d:e0:83:
                    2d:bd:ab:c8:bc:74:56:0a:ef:ca:f3:49:c1:4c:05:
                    88:7e:10:b3:4c:6c:f0:bd:47:d8:b7:1f:e6:97:72:
                    3a:b7:7b:89:08:ae:16:c8:a3:c4:87:ef:b3:6e:ac:
                    06:eb:e1:b9:b6:8c:14:3d:53:96:ee:02:fc:5f:31:
                    45:a2:ba:5e:eb:88:a8:85:16:ef:88:83:30:ca:c6:
                    79:25:db:0b:34:b8:84:3a:19:1d:a1:f3:b8:c1:bb:
                    99:15:6d:1d:dc:32:eb:d3:41:c9:3c:b2:2f:41:53:
                    c0:be:67:37:86:26:ab:69:24:ea:06:05:3d:d5:75:
                    67:15:3d:cf:87:10:31:9c:d9:97:b0:74:77:1a:77:
                    c8:2a:5e:c7:0c:ac:a4:3c:b8:10:a1:a5:81:cb:dc:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136498

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.228.0/22
                  103.220.204.0/22
                IPv6:
                  2407:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:a4:53:44:f7:da:e0:68:36:a5:4b:71:77:f2:e5:e1:d5:
         a6:f7:93:47:d0:48:06:26:db:dc:4d:af:12:b1:77:8f:55:cd:
         48:9b:f7:fe:c6:6a:23:ce:4a:2c:9c:f3:19:2f:24:6e:eb:31:
         7b:d7:21:f8:01:7c:85:36:91:3d:c6:28:0d:87:a5:a2:7c:3f:
         09:c2:2a:93:8e:13:1d:51:dc:1f:3a:12:f8:80:03:45:95:3d:
         56:eb:b0:48:59:3a:3e:c8:cd:b6:92:08:a8:d5:7f:47:45:f9:
         34:49:82:c3:49:97:c3:b7:5f:7a:e1:d0:a5:a1:d3:2e:79:db:
         6a:23:dd:8d:e5:b9:81:17:d5:29:de:28:a6:35:e6:a4:35:94:
         c1:19:e3:a2:66:a2:10:66:be:d8:3a:5d:7e:f3:69:cb:35:b0:
         1d:30:68:70:a8:e8:41:85:c4:eb:b1:23:15:9c:aa:da:86:43:
         89:3c:4b:ce:3d:30:83:e4:00:28:49:da:f6:c5:40:96:c8:62:
         21:cf:56:40:b0:2f:98:38:c1:93:d1:37:af:03:5d:5e:df:80:
         47:dd:5b:53:94:1f:d8:7e:93:88:17:a2:eb:5d:3f:be:2c:27:
         4d:da:b5:92:58:1c:6e:fa:6d:1c:76:c1:7f:0f:25:63:b4:96:
         14:02:65:cc
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAthOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyNDE4NTU0M1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQyM0ExMTAvBgNVBAUTKEQ1NjNCNEQxNzFBOTIzOUI3RDk5OTgx
RTkwNkE0NDQ2ODE2N0JDMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbg6QdownqBwnn8c8gD9EvhPns++9zPx0YM4pEMQ1OaFRhCGTPxbxBaUC3mkBv
PyHaJftlEwmPDbrQEadyRQ9TF8BSGS47MIARI89yKVJtnAy1CQl7ZetglZYrAlMm
FadyO3bnuD3ggy29q8i8dFYK78rzScFMBYh+ELNMbPC9R9i3H+aXcjq3e4kIrhbI
o8SH77NurAbr4bm2jBQ9U5buAvxfMUWiul7riKiFFu+IgzDKxnkl2ws0uIQ6GR2h
87jBu5kVbR3cMuvTQck8si9BU8C+ZzeGJqtpJOoGBT3VdWcVPc+HEDGc2ZewdHca
d8gqXscMrKQ8uBChpYHL3ISZAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU1WO00XGp
I5t9mZgekGpERoFnvCYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZEMjNBLzhFM0MxMjFFNDhENTExRUE4MzM1MTc3MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8xV08wMFhH
cEk1dDltWmdla0dwRVJvRm52Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhUyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLfvkAwQCZ9zM
MA0EAgACMAcDBQAkB1yAMA0GCSqGSIb3DQEBCwUAA4IBAQAPuaRTRPfa4Gg2pUtx
d/Ll4dWm95NH0EgGJtvcTa8SsXePVc1Im/f+xmojzkosnPMZLyRu6zF71yH4AXyF
NpE9xigNh6WifD8JwiqTjhMdUdwfOhL4gANFlT1W67BIWTo+yM22kgio1X9HRfk0
SYLDSZfDt1964dClodMuedtqI92N5bmBF9Up3iimNeakNZTBGeOiZqIQZr7YOl1+
82nLNbAdMGhwqOhBhcTrsSMVnKrahkOJPEvOPTCD5AAoSdr2xUCWyGIhz1ZAsC+Y
OMGT0TevA11e34BH3VtTlB/YfpOIF6LrXT++LCdN2rWSWBxu+m0cdsF/DyVjtJYU
AmXM
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:01 2026 by rpki-client