Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.cer (raw, json)
Hash identifier:          xNXslwCtWTBuiXzTJTwcCNsg4NY+1G7TWl6VCL3m8Hk=
Subject key identifier:   10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CAE1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Aug 2026 13:08:27 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 64061
                          IP: 103.237.100.0/22
                          IP: 163.53.244.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 23:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183009 (0x2cae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  4 13:08:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:8f:e2:b0:5d:2a:58:0c:35:4b:d8:c8:fc:
                    f7:c0:ad:2a:23:ea:ef:50:8d:e0:2b:fc:72:03:06:
                    cf:dd:ac:50:54:51:b7:2d:e3:4f:d1:85:8e:75:11:
                    2a:85:ce:ae:eb:07:dc:3c:59:5b:66:1f:b7:b3:4f:
                    19:ed:9a:35:52:bd:c4:69:b8:73:7b:80:74:5a:7d:
                    92:43:35:c4:e8:4b:ec:60:2a:88:17:84:4f:ae:a1:
                    c5:6f:6a:d4:b2:6e:87:c0:69:fa:61:39:88:91:c2:
                    09:79:2e:f2:29:0d:3a:2f:27:eb:d5:3b:9e:06:32:
                    4c:70:a4:df:71:a9:0e:87:53:ef:57:78:f3:3a:86:
                    23:e2:fe:4f:50:d5:f4:af:c2:31:25:9c:3e:bb:1a:
                    a5:9d:ff:a9:dc:01:5c:f4:48:c7:27:2b:ca:14:3b:
                    24:8a:7e:df:8c:dd:5e:38:05:b7:da:8c:fb:15:fb:
                    e5:09:1c:d6:b8:a5:02:a9:b5:ff:c1:0d:87:8e:10:
                    95:34:b5:c7:43:75:86:aa:93:cb:98:c0:6e:36:41:
                    2c:5f:d2:44:46:42:a2:e2:1a:f0:5d:1a:b3:9b:f0:
                    8e:68:37:f9:35:62:46:ba:64:ef:a4:96:78:26:15:
                    da:d0:7d:ff:fa:14:20:ac:4b:96:4b:2c:b6:4d:ea:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64061

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.100.0/22
                  163.53.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:78:0f:38:2a:48:20:e3:13:33:cc:40:1f:7b:c4:17:ac:64:
         fc:cd:ac:51:53:b8:d9:fa:ec:04:fa:df:43:a7:60:50:8d:61:
         c0:da:e9:b4:79:3b:96:d1:39:8a:97:fb:6e:9e:e3:4a:80:77:
         e1:98:07:97:c8:14:40:3f:b8:bc:8f:69:b7:81:ab:87:0d:a5:
         44:42:59:78:b3:82:f6:4d:26:7b:73:69:51:eb:ca:20:d2:b9:
         40:75:ea:b0:e2:61:a9:89:90:69:6e:94:27:3f:ad:a4:77:fd:
         0b:47:9e:18:00:0f:77:c9:1b:e4:c7:26:dc:34:6a:4d:00:f2:
         52:84:77:b2:7f:d3:fc:22:9b:04:b1:19:3d:6e:18:01:f4:cf:
         31:de:2c:d8:e4:76:33:8e:37:c6:17:42:b5:87:1d:b7:70:5b:
         ad:9b:46:d1:ba:74:10:59:a5:09:f9:c6:90:13:fa:5e:cc:80:
         7c:59:72:16:d4:e3:d1:62:00:e2:9e:4a:4d:e7:b8:a6:0e:45:
         c3:0e:02:b7:95:c0:72:6d:e2:7f:4e:23:6a:2d:ac:0f:48:79:
         fb:67:fe:05:fd:10:b8:db:cc:cb:04:aa:fc:3d:54:a0:52:d3:
         09:55:ab:31:4f:d8:b3:81:99:16:e8:93:16:36:fb:26:33:f2:
         89:01:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:32 2026 by rpki-client