Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer (raw, json)
Hash identifier:          KIF5r9/5I+KMUm6VOnRVCcwH7jbdhrRRvAbC47ASzOc=
Subject key identifier:   11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C546
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 15:05:55 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 134190
                          AS: 137932
                          IP: 103.117.128.0/22
                          IP: 2403:19c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 09:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181574 (0x2c546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 15:05:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:20:33:12:94:bd:5a:8e:74:92:15:e5:42:
                    d0:f8:e4:36:73:8e:ba:28:52:f1:af:18:3a:a7:60:
                    7c:0b:7e:1c:23:65:fe:be:b9:a9:3e:b4:fc:68:48:
                    4f:27:5a:3d:fa:af:c3:4b:a7:3b:bf:a8:57:c5:99:
                    12:94:93:19:01:3b:a6:65:f1:19:6f:9c:49:fc:b9:
                    d6:79:fa:75:b5:1c:8a:8f:bf:55:fa:51:10:c8:4e:
                    d4:70:2f:96:9a:3e:26:ff:07:70:03:b3:35:5e:2e:
                    05:1b:40:16:cd:9d:4f:29:47:0a:b5:c7:e6:20:49:
                    cf:56:d0:85:45:d0:d6:c1:26:b7:33:49:9d:57:fc:
                    20:43:e9:f2:e1:a6:0f:ae:c6:9f:03:e4:c2:8b:89:
                    5e:72:5c:e8:fc:47:62:11:9c:9f:e2:cd:7c:8e:11:
                    93:c6:a6:b7:cf:a1:8e:a8:78:93:1c:3b:eb:b9:e0:
                    f6:79:94:d5:cb:85:e7:10:13:9f:f1:5c:8d:a5:1e:
                    4b:7d:6c:69:c9:40:68:f8:19:46:ed:6f:9f:be:af:
                    62:22:fe:75:0e:7d:31:20:49:75:4c:2e:2e:90:6e:
                    ed:58:4e:07:4b:d5:21:df:a0:c0:5b:35:2f:14:2e:
                    49:88:74:fe:71:9f:59:89:42:d0:4a:d9:a4:cb:7f:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134190
                  137932

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.128.0/22
                IPv6:
                  2403:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:53:d9:24:74:26:19:b5:f5:fe:d8:2f:76:38:54:55:ee:
         23:59:bf:68:78:db:15:d7:b0:92:cb:9f:8d:1d:2c:a2:a8:16:
         ce:df:0c:a9:cb:89:c1:61:d3:76:4c:36:6c:6e:9e:41:d7:60:
         88:b8:31:a7:b8:5c:1b:fa:e1:14:ee:27:09:bd:98:1a:82:a9:
         01:a2:1c:40:0a:7c:15:87:13:2b:e5:41:b5:16:50:6f:45:f0:
         58:b2:c5:eb:61:69:99:63:e7:93:69:76:97:bb:6d:4a:1f:e0:
         13:bb:ff:8b:b0:45:87:0b:0b:dd:53:1e:07:cf:5e:f2:c6:2c:
         61:27:13:82:4a:a6:ad:58:ad:c9:a8:cf:65:de:f0:f5:01:bd:
         9c:59:3a:42:85:9a:b2:08:ef:9c:7a:1a:5c:3a:48:d1:71:ff:
         24:10:5c:38:ea:a2:47:a8:ea:d7:82:d4:39:a8:0f:c7:d2:fb:
         05:93:26:47:9c:9d:a8:bc:9f:98:96:3d:ff:43:73:d3:cd:d8:
         fc:8b:fa:e0:53:16:3b:e8:99:b0:60:65:56:90:f5:a3:fb:18:
         90:6d:c8:f3:77:32:87:bc:cd:80:48:45:1c:75:9c:ee:49:77:
         f9:7e:d6:61:db:4f:00:d7:8e:c6:07:41:8c:bf:9d:e0:21:15:
         ae:19:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 12:23:22 2026 by rpki-client