Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
File:                     40IvTt5eaM7JqqfjxuMnjHMOHnw.cer (raw, json)
Hash identifier:          zzTEWmldVDbHSqhxvbQhX/rTZ3R4mFAaccSvN398OBc=
Subject key identifier:   E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CB53
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 13:57:55 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 18212
                          IP: 203.26.77.0/24
                          IP: 203.92.4.0/23
                          IP: 2001:df0:84::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183123 (0x2cb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 13:57:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:7d:40:c9:d7:2c:e8:41:ce:df:d2:71:b8:
                    4b:c4:3a:94:62:70:fc:a7:08:3c:4c:ae:7e:bc:2d:
                    e8:f8:1f:06:07:52:46:5c:b6:df:cb:4f:cd:c5:1b:
                    44:bd:fb:5d:8b:50:04:82:f9:63:68:8f:a8:65:26:
                    99:07:01:0b:83:ad:5b:ca:21:cd:7a:31:dd:34:87:
                    7c:08:35:85:00:4a:cf:28:9f:e8:37:71:9a:c0:75:
                    83:e7:49:4d:b6:95:62:73:13:9e:c8:f6:ec:c0:7e:
                    ae:c3:55:3a:4a:2c:71:20:c2:af:e2:4a:27:ff:a6:
                    87:87:ae:a4:b5:6b:12:f9:ab:8f:63:8d:a2:0b:67:
                    16:bb:07:c5:50:0b:d1:cf:41:a0:90:5d:34:ae:a0:
                    bd:2f:90:de:7f:73:c8:6b:f5:e4:80:78:22:7e:8a:
                    b2:3e:1e:61:58:4d:7f:48:62:e7:49:a8:b1:aa:b4:
                    d6:db:e1:30:c8:1c:1d:b2:9d:a9:66:c9:1b:7c:1b:
                    82:78:01:e2:f9:68:66:1a:b5:65:75:67:31:61:87:
                    dc:dd:ca:5b:63:a0:52:87:2a:9f:61:65:b8:87:fd:
                    23:0c:fd:ca:61:51:eb:3c:f9:6b:8e:03:2d:17:39:
                    da:54:61:e7:a8:a8:c6:b6:2b:83:87:a3:23:22:68:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18212

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.77.0/24
                  203.92.4.0/23
                IPv6:
                  2001:df0:84::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:14:30:d8:72:76:b1:c8:a2:f9:20:1c:47:88:95:30:94:c2:
         4f:ff:a1:3e:df:cb:84:38:be:cf:93:17:6a:50:30:94:0a:a4:
         17:e0:dd:b1:d1:c6:e0:63:b5:7c:b8:6a:ea:b3:39:19:31:00:
         55:6e:e7:aa:14:c1:60:c0:38:d3:ef:f3:04:c4:30:e4:c1:f2:
         b2:ec:cd:32:f9:5e:93:6d:72:42:b1:22:4b:c6:a7:86:a3:2c:
         b8:cf:2b:bf:90:4f:53:67:48:a2:57:d2:2c:31:3f:df:f0:4d:
         74:13:c2:2d:bb:4b:4c:0a:c1:a5:05:35:85:e9:a4:14:5d:63:
         d0:6d:3f:89:d8:3d:fd:6b:c8:62:3a:1a:eb:50:d3:fe:67:f0:
         ef:85:c0:9a:f5:fd:fa:d4:14:eb:a6:58:bd:0b:91:7d:49:63:
         d2:7f:76:e5:2f:98:74:05:ea:fc:3a:c7:2e:42:e4:92:8b:59:
         76:4a:c1:68:36:c5:91:f4:c3:79:eb:e3:14:7d:ae:f3:e1:3f:
         03:c2:54:ac:8b:2b:d4:2f:04:91:84:c9:6e:0f:a3:cd:2c:18:
         50:fd:79:3d:e2:b8:e6:3d:1c:af:7f:74:ca:d3:81:e7:1d:77:
         b3:53:8d:af:47:8a:ea:42:17:54:b2:3f:4f:d3:60:0e:e4:7b:
         5a:7b:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:48:25 2026 by rpki-client