Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
File:                     DBvOAktD_dqH85YV2ZS6NwYkbFA.cer (raw, json)
Hash identifier:          4cpBUd9a4dMWnc/RX9S1He7BHEvMt/RQ8prQbPoaA0o=
Subject key identifier:   0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CB33
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 06:42:24 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 139230
                          IP: 103.140.94.0/23
                          IP: 2001:df0:b780::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183091 (0x2cb33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 06:42:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:a1:d0:4d:4c:a2:82:b0:b6:6f:e6:13:f3:
                    d6:5a:29:a6:05:87:f7:cb:df:87:ae:a2:f4:27:00:
                    2f:61:19:10:ac:22:53:9b:a3:7d:32:ab:69:7c:01:
                    1b:4f:49:2a:4d:53:75:a7:17:5a:c5:41:40:fb:86:
                    39:70:2d:a5:b0:51:46:4a:95:60:24:c8:45:84:ce:
                    eb:be:28:1e:bf:5e:9c:b3:7d:ad:1f:24:81:20:a2:
                    1a:fa:a0:c8:51:62:e3:da:4b:95:24:fc:55:2a:a2:
                    a2:6c:72:f8:fd:1f:f1:83:2a:79:e2:7a:d5:b8:37:
                    c1:22:57:39:60:c3:0a:bf:a2:30:3e:99:69:a6:d4:
                    35:1b:e9:5e:b4:f9:16:14:60:68:f4:47:56:aa:51:
                    c9:f5:cf:13:48:8e:9c:9b:2b:e7:3d:37:eb:37:97:
                    f4:15:8a:0a:fb:5e:e5:00:24:44:73:f2:73:c4:06:
                    c1:82:d8:8d:3b:3c:5f:2d:d3:c1:8b:01:09:1a:c3:
                    98:21:9f:9d:77:9b:34:06:09:5a:35:44:dc:68:df:
                    c5:a7:5a:ba:ef:c2:e1:3f:ed:92:08:b9:64:06:5f:
                    c3:ec:48:db:15:5c:91:1f:f6:69:07:c2:29:01:fc:
                    c5:30:b0:4c:2c:7b:69:62:7e:9e:a7:af:d1:4b:1f:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139230

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.94.0/23
                IPv6:
                  2001:df0:b780::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:be:71:96:5e:d5:eb:09:b3:00:df:99:51:f4:85:8e:4e:38:
         b7:dd:87:1a:3b:b8:a1:19:73:95:1a:31:c1:6f:ac:cf:c4:0a:
         94:67:24:23:1b:b9:84:8f:c5:0f:24:45:ab:bf:6b:1a:e4:8a:
         97:f7:07:fa:36:8e:8b:a1:03:9b:ba:97:88:9a:ef:3a:99:c1:
         6c:13:0f:71:16:2a:a1:b4:90:fd:06:c0:9b:b6:56:d6:6b:45:
         58:91:a1:f0:8f:fc:df:e6:03:52:1c:18:f7:9e:fd:3a:9a:aa:
         d6:9f:72:92:e6:09:b0:71:c4:49:f0:a6:c8:5f:ca:69:2e:d8:
         b6:b7:5d:4d:15:60:e3:4f:23:08:23:7a:52:ef:c8:70:b6:f6:
         03:62:35:b9:49:48:24:59:61:38:a9:7d:f9:a6:0d:f8:0f:3d:
         40:9e:31:11:2a:72:61:df:bf:61:7f:7a:31:46:dc:5e:5a:42:
         41:cc:1f:bf:71:1f:d8:ba:7a:7b:9a:97:cf:d6:f6:98:94:7e:
         f0:62:52:ca:d7:f8:70:73:d5:83:52:19:55:9d:d2:c0:44:b0:
         23:3a:c9:bb:e6:3e:90:71:27:c1:38:11:79:57:2f:22:b0:6b:
         77:2b:31:89:6f:3e:83:64:b7:68:27:25:0a:6c:e3:a7:46:00:
         4c:9d:fc:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:52 2026 by rpki-client