Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
File:                     B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer (raw, json)
Hash identifier:          w721nHb5pffEwrCS14OE3nxblcRK14o2UoZgSrLeHqM=
Subject key identifier:   07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB57
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jun 2026 07:16:47 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    AS: 136772
                          IP: 103.95.204.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179031 (0x2bb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  5 07:16:47 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A9150064, serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:d1:a4:3f:84:27:ec:95:18:5b:1e:d2:7f:
                    70:87:8f:65:f4:53:66:cd:12:8e:32:4b:49:2d:d6:
                    72:40:62:41:90:af:a9:25:f0:b9:8c:cc:38:6c:d7:
                    85:1c:d3:aa:4e:09:f8:4c:81:19:b7:15:d9:06:55:
                    7b:4c:da:a5:18:bc:0c:b0:9c:b0:0b:ef:ca:22:a4:
                    75:a2:f7:7b:39:cd:c0:53:f6:78:ff:fb:32:cd:61:
                    72:d5:33:fb:f0:c6:e9:50:aa:8a:58:de:6a:a8:44:
                    1b:c2:a2:bf:55:0f:65:d5:6d:cc:a7:7b:56:d8:f0:
                    af:0c:2e:3b:42:8e:a9:94:89:1d:71:cc:3a:e4:bb:
                    c7:06:f5:f8:85:51:08:0e:a1:ee:e2:39:2c:53:87:
                    90:80:e2:3f:4c:d5:68:00:8d:ed:76:d1:21:0d:83:
                    1e:56:99:7f:79:40:2f:8c:48:84:b0:cd:e9:e9:a8:
                    36:7d:6f:f3:e5:a1:61:02:a1:7e:05:d9:08:4e:5c:
                    fd:a1:c4:99:bd:d1:7b:bb:c4:a9:09:fc:e4:7a:4d:
                    fd:f8:02:0c:f7:e0:80:68:0e:53:2b:23:7b:07:7c:
                    fa:49:cd:09:1c:49:bd:ce:58:99:81:a9:1c:42:e7:
                    46:30:f4:90:d5:79:16:4d:a2:f0:92:e3:62:0d:39:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136772

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:1a:e7:25:18:43:ab:01:95:a5:d6:a1:95:e0:2c:93:55:
         7f:ac:70:6f:7c:f2:f0:f4:84:e0:14:72:09:d6:a5:ab:bf:8f:
         6b:77:65:46:0a:19:4a:02:79:97:88:8b:87:6d:45:0c:ae:db:
         b0:48:ca:e5:03:22:de:cc:aa:42:86:91:6a:5b:0b:6c:41:74:
         46:f3:c6:a3:01:35:82:a3:30:56:9c:4b:08:23:71:55:4d:0a:
         16:c5:80:a9:8f:5b:a2:68:fb:46:2f:f0:1e:c5:f2:39:b4:f2:
         45:8a:ac:4d:e9:13:a4:d5:36:67:78:77:6a:4a:9b:a1:ab:33:
         10:bd:a2:b6:58:74:94:67:f1:94:07:d3:51:25:53:3f:b3:e4:
         2c:c6:8e:91:b0:0d:45:02:64:2e:9a:ea:e9:ad:3e:b6:cd:2b:
         87:93:90:6e:48:ce:0d:14:80:f1:a5:eb:b3:c0:e5:61:26:d7:
         28:2a:ee:e2:a1:4f:3a:2e:df:a0:92:85:ef:69:d6:9b:95:5e:
         bc:e5:28:f5:4e:73:b0:b0:0c:d6:d3:49:dc:dd:6c:ca:57:40:
         42:b7:d0:ef:ad:5d:d1:f8:5a:ce:4d:b4:98:36:6f:7d:8a:c5:
         3e:56:ee:c2:1d:21:a2:39:1e:cb:e4:65:53:dc:b5:b1:66:23:
         64:9f:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 06:54:09 2026 by rpki-client