Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.cer (raw, json)
Hash identifier:          u2nmQmsgmKTJS+kZJlOiGMAT5r7bMIE1iD/6DM+nWXU=
Subject key identifier:   0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C9A7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 21:00:07 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 135494
                          IP: 103.219.232.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182695 (0x2c9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 21:00:07 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:87:b1:d6:3d:59:0e:2f:b5:03:11:aa:03:
                    b6:db:60:69:f9:ef:2d:2d:58:7f:b3:6e:26:2b:e8:
                    de:c6:90:70:2d:7e:bb:28:1a:d9:0b:5a:0b:8d:eb:
                    d8:63:9c:d4:66:c7:9c:f3:96:76:13:b0:06:b4:9e:
                    4f:52:f5:82:b5:eb:8e:16:c9:b2:01:93:b6:65:a7:
                    41:81:cd:26:40:4c:c1:e9:4d:92:3b:46:34:71:72:
                    16:0e:a9:dd:c3:2d:1a:c6:61:b6:af:70:50:6c:81:
                    9f:f8:85:0e:ea:16:dc:7b:45:4e:63:f3:45:14:b0:
                    39:55:e3:36:d3:a8:ab:2e:32:98:25:5c:fe:c0:cd:
                    16:cf:09:cd:1f:bd:b1:cd:27:f7:0f:ca:fa:20:70:
                    ad:aa:d8:d4:f7:5f:10:fe:13:91:eb:f7:24:69:90:
                    2a:8b:5c:a8:1b:b8:1a:e0:d1:40:40:b4:76:be:b6:
                    8a:03:1d:6c:e7:f1:1b:7c:31:56:c3:2d:31:ed:37:
                    78:56:8d:37:e1:39:f1:41:20:30:68:47:fc:84:19:
                    e9:bd:fa:37:26:26:e3:4a:d2:11:e6:b0:00:b4:82:
                    1d:1f:3c:50:46:a9:86:85:de:e6:4d:de:f0:14:a6:
                    af:ec:26:d6:06:c3:11:18:51:91:9f:87:1a:4c:65:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135494

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:c7:d4:22:f1:56:4d:f0:73:4e:32:47:87:9e:2f:56:df:ba:
         f4:5c:e8:7e:a4:b3:dd:06:a9:91:13:47:ff:5a:9b:a6:33:80:
         46:c2:80:79:70:7d:7f:e1:96:ea:73:9e:53:96:02:68:72:16:
         23:88:43:1e:4c:d4:10:1e:81:24:a6:95:d3:69:f2:ea:a2:0f:
         0e:44:34:3a:30:25:35:2c:e1:26:a8:fc:93:8f:e2:d6:ef:6f:
         d8:30:87:30:12:6d:fc:2b:63:d4:12:ad:cb:03:a6:77:dd:08:
         90:6b:36:df:fc:a6:85:21:1c:58:e3:3f:03:c2:52:d8:71:c9:
         cb:1b:aa:bd:05:ac:f9:5f:72:b1:79:ef:d6:ee:82:c1:f9:39:
         ad:b4:8d:6b:10:72:db:bf:68:69:bb:f4:0d:d7:95:bf:26:fb:
         06:29:56:dc:75:40:98:b5:e5:08:65:86:ce:6b:7d:4c:00:3d:
         81:b5:15:13:e0:29:6e:ff:d5:89:cb:4b:a5:39:6f:5f:41:ea:
         14:d8:19:31:ed:c0:1b:60:0a:6a:b5:0e:75:e9:6d:01:a7:bd:
         aa:87:d2:d4:08:53:53:0e:a6:2e:5e:ae:14:48:62:19:d2:69:
         95:a1:83:50:c5:0d:5a:b9:db:4a:1e:b0:64:e0:03:9a:8a:f0:
         d6:31:b6:bb
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAsmnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDczMTIxMDAwN1oXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdC
QjU3MUE1MjAwQ0U1NUQ4RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyBIex1j1ZDi+1AxGqA7bbYGn57y0tWH+zbiYr6N7GkHAtfrsoGtkLWguN69hj
nNRmx5zzlnYTsAa0nk9S9YK1644WybIBk7Zlp0GBzSZATMHpTZI7RjRxchYOqd3D
LRrGYbavcFBsgZ/4hQ7qFtx7RU5j80UUsDlV4zbTqKsuMpglXP7AzRbPCc0fvbHN
J/cPyvogcK2q2NT3XxD+E5Hr9yRpkCqLXKgbuBrg0UBAtHa+tooDHWzn8Rt8MVbD
LTHtN3hWjTfhOfFBIDBoR/yEGem9+jcmJuNK0hHmsAC0gh0fPFBGqYaF3uZN3vAU
pq/sJtYGwxEYUZGfhxpMZSuvAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUC1O4Cmyc
iut01te7VxpSAM5V2PMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1REVCLzE2MkNCMjc0RUE0QzExRUFBMjU3QjkzOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215
Y2l1dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhFGMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9voMA0GCSqG
SIb3DQEBCwUAA4IBAQCux9Qi8VZN8HNOMkeHni9W37r0XOh+pLPdBqmRE0f/Wpum
M4BGwoB5cH1/4Zbqc55TlgJochYjiEMeTNQQHoEkppXTafLqog8ORDQ6MCU1LOEm
qPyTj+LW72/YMIcwEm38K2PUEq3LA6Z33QiQazbf/KaFIRxY4z8DwlLYccnLG6q9
Baz5X3Kxee/W7oLB+TmttI1rEHLbv2hpu/QN15W/JvsGKVbcdUCYteUIZYbOa31M
AD2BtRUT4Clu/9WJy0ulOW9fQeoU2Bkx7cAbYApqtQ516W0Bp72qh9LUCFNTDqYu
Xq4USGIZ0mmVoYNQxQ1audtKHrBk4AOaivDWMba7
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:56 2026 by rpki-client