Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.cer (raw, json)
Hash identifier:          HveTBfLcENE5xhnvS0/BWlAU4pU1Xjx5pqR/BXsmL+g=
Subject key identifier:   13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AD43
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 17 Apr 2026 14:23:25 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132239
                          AS: 149842
                          IP: 103.8.62.0/24
                          IP: 103.227.150.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175427 (0x2ad43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 17 14:23:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:78:9b:51:85:53:5e:71:d3:4a:7e:2c:7e:
                    dc:7a:fa:d2:76:0f:a3:c4:e5:7e:93:c1:b6:60:70:
                    51:5b:28:b1:e9:18:d2:6e:40:da:6c:44:e9:ea:99:
                    23:7e:52:96:d1:72:b0:0d:00:dc:8c:17:eb:30:af:
                    be:c6:71:8a:ce:6e:9a:72:1d:c1:de:34:4d:90:da:
                    24:12:6a:14:e2:44:cb:75:07:3a:83:11:1a:4b:f0:
                    f8:96:96:fd:cb:b1:f3:00:8c:63:a3:43:99:3b:96:
                    00:ff:61:6c:5d:d4:dd:fb:5a:33:f3:fb:c1:92:2f:
                    b6:a1:2c:0e:4b:db:82:70:d4:5c:58:0f:b9:c6:4a:
                    37:97:02:b7:ea:8d:f0:c2:bf:5d:82:f1:74:c2:c6:
                    c1:72:41:2b:cd:5a:13:26:29:3e:65:b1:98:80:13:
                    c0:68:c2:d9:4b:a8:85:ac:da:74:53:f3:4c:66:dd:
                    ca:da:d9:53:2e:0d:85:d2:c2:ac:2a:c4:4b:2f:0a:
                    d5:44:6a:5f:d6:e3:4a:68:15:3a:35:b2:dd:16:c2:
                    4f:00:d5:23:86:e5:6a:ba:31:1d:86:21:21:a7:69:
                    3b:f5:4b:c5:81:76:9a:72:e7:fc:8b:ca:45:44:bc:
                    20:51:1a:45:73:f4:89:2b:e6:00:45:f3:75:e6:29:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132239
                  149842

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.62.0/24
                  103.227.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:c4:39:61:1b:27:77:cc:70:79:94:72:f4:5b:8d:2a:74:
         f6:a0:46:6e:97:91:04:0e:46:b1:7e:8d:52:53:ec:aa:7d:58:
         ff:e0:14:45:59:6a:61:ca:26:ef:5d:95:99:c9:09:4e:fc:18:
         d9:5b:32:aa:fd:3b:51:0c:b2:72:20:bc:8f:2b:d2:ee:b3:54:
         a6:f5:b8:06:b0:13:b7:ba:8a:61:d1:1b:43:b1:98:bb:1c:b2:
         bf:e2:cd:dd:26:02:d2:57:61:8e:66:40:20:29:e1:f8:7d:38:
         71:de:48:5e:ba:ca:fc:3b:90:94:fe:7d:b5:57:6a:d4:11:50:
         ed:20:c4:1b:07:0a:24:49:53:ec:28:31:ac:84:05:8a:dd:68:
         b1:cb:e5:3a:35:9a:54:f5:36:40:51:6f:52:55:29:5d:21:f5:
         1a:4f:5c:ff:74:bf:21:d9:cb:3e:ed:1a:ad:61:db:9f:c1:31:
         80:10:bd:6b:c2:cc:09:30:c1:a4:04:2c:e8:6c:48:72:19:30:
         4b:18:0d:64:28:8a:c6:7d:3b:63:f2:a8:f9:8a:9e:30:5b:23:
         83:de:34:9c:48:64:e2:18:21:b3:f3:86:9e:b1:c7:b3:2d:7b:
         79:e2:32:44:1c:0a:a0:f9:74:e7:3b:8a:fa:8a:40:a2:f1:04:
         70:b4:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:41 2026 by rpki-client