Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
File:                     IKFf0591NMenolMf7YtaFwipP1I.cer (raw, json)
Hash identifier:          NTBhfaAv4/Ba5KbXSmopRP5lmzAweiDrhFV+E29xfcU=
Subject key identifier:   20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D0DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Aug 2026 13:33:26 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 55925
                          AS: 136147
                          IP: 103.105.73.0/24
                          IP: 202.94.73.0/24
                          IP: 2001:df1:6400::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184538 (0x2d0da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 28 13:33:26 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:36:24:29:ea:c5:ee:a0:a5:be:07:a4:cb:
                    11:e4:3e:29:a2:9b:22:a5:91:bf:5d:d6:2f:6e:46:
                    60:35:92:8d:05:e5:60:af:53:91:b1:11:e2:f1:d2:
                    47:5b:39:92:c3:20:69:9f:42:dc:e8:1f:b9:bf:2e:
                    27:19:30:7f:5b:c8:bb:98:1f:ad:54:6c:cf:02:cc:
                    dc:80:59:74:c6:17:f2:cb:6e:38:81:6c:62:a1:41:
                    e2:dd:5a:4f:81:17:48:a3:c0:a6:5a:d0:3b:0f:ac:
                    11:47:74:c8:05:b2:f1:0e:cd:e8:f2:bc:0e:56:de:
                    1e:7f:eb:4d:10:8f:86:3c:f5:ab:67:16:07:9e:09:
                    cf:72:ad:7e:49:84:4d:97:80:4d:8b:5a:3d:ee:08:
                    71:57:37:ca:6c:29:40:e2:5d:b6:d2:10:4c:50:d7:
                    7d:4f:44:54:cc:02:00:30:42:14:c1:a3:a8:63:8f:
                    4c:4c:82:97:42:54:e4:3d:62:d4:dc:67:5a:f2:bc:
                    c6:b7:6c:f4:a0:8d:62:94:68:f0:69:89:05:c7:90:
                    62:16:a5:bb:36:1e:72:1f:c0:64:58:24:67:87:f6:
                    c2:57:d4:7a:85:f8:d5:1c:3d:53:ba:1a:d5:2b:52:
                    d5:13:51:41:2a:b9:5a:44:9f:fc:0a:ef:9a:b6:d2:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55925
                  136147

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.73.0/24
                  202.94.73.0/24
                IPv6:
                  2001:df1:6400::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:79:bc:7e:b0:00:44:e3:9c:fe:f7:e2:8f:b0:f6:99:19:
         bc:0e:aa:c8:de:f7:26:c1:9e:03:75:80:5d:72:f4:c6:46:0a:
         06:40:8e:e8:ba:42:7b:cd:d2:2a:09:76:e7:2c:23:f8:79:16:
         83:d2:14:df:d1:2a:75:39:55:57:01:cf:39:e8:96:cb:58:89:
         dd:77:83:fa:4d:e8:9d:8e:76:7e:6c:1e:6c:e0:52:56:2d:86:
         ad:88:eb:c9:97:23:3a:16:f2:8b:0c:ea:e8:bc:94:32:e5:8e:
         e1:77:9a:88:1c:96:5a:3e:ba:43:5e:8c:5e:19:9a:05:ee:8a:
         b6:f8:30:3d:f7:0b:b1:28:a7:9b:23:23:ab:4a:23:4f:b6:b5:
         ee:5b:ee:c8:b8:dd:3c:ed:46:fd:6a:25:2f:31:8b:1d:7e:6d:
         b3:fa:3a:a1:0a:27:aa:0a:5a:42:5f:f1:55:ad:0f:87:51:32:
         c9:8e:60:29:ae:26:67:3d:2e:50:3b:f3:56:64:88:d7:02:44:
         f1:57:44:b0:97:95:82:70:fe:ac:b5:bd:13:21:13:05:fc:d9:
         d3:a0:a4:dc:76:30:c4:89:34:40:e5:56:db:4c:9b:7d:2c:08:
         db:55:18:bb:72:12:ed:5c:3a:4f:96:7b:b9:cc:9a:e0:ad:63:
         f8:6c:ff:c2
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIDAtDaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgyODEzMzMyNloXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTFCQkUxMTAvBgNVBAUTKDIwQTE1RkQzOUY3NTM0QzdBN0EyNTMx
RkVEOEI1QTE3MDhBOTNGNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrpDYkKerF7qClvgekyxHkPimimyKlkb9d1i9uRmA1ko0F5WCvU5GxEeLx0kdb
OZLDIGmfQtzoH7m/LicZMH9byLuYH61UbM8CzNyAWXTGF/LLbjiBbGKhQeLdWk+B
F0ijwKZa0DsPrBFHdMgFsvEOzejyvA5W3h5/600Qj4Y89atnFgeeCc9yrX5JhE2X
gE2LWj3uCHFXN8psKUDiXbbSEExQ131PRFTMAgAwQhTBo6hjj0xMgpdCVOQ9YtTc
Z1ryvMa3bPSgjWKUaPBpiQXHkGIWpbs2HnIfwGRYJGeH9sJX1HqF+NUcPVO6GtUr
UtUTUUEquVpEn/wK75q20mXlAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQUIKFf0591
NMenolMf7YtaFwipP1IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxQkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MUJCRS9CN0I5OEZBQzUyOTkxMUYxODk5MTE5M0Q5MDgzMzc3My9JS0ZmMDU5
MU5NZW5vbE1mN1l0YUZ3aXBQMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDANp1AgMCE9MwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBABnaUkD
BADKXkkwDwQCAAIwCQMHACABDfFkADANBgkqhkiG9w0BAQsFAAOCAQEAALR5vH6w
AETjnP734o+w9pkZvA6qyN73JsGeA3WAXXL0xkYKBkCO6LpCe83SKgl25ywj+HkW
g9IU39EqdTlVVwHPOeiWy1iJ3XeD+k3onY52fmwebOBSVi2GrYjryZcjOhbyiwzq
6LyUMuWO4XeaiByWWj66Q16MXhmaBe6KtvgwPfcLsSinmyMjq0ojT7a17lvuyLjd
PO1G/WolLzGLHX5ts/o6oQonqgpaQl/xVa0Ph1EyyY5gKa4mZz0uUDvzVmSI1wJE
8VdEsJeVgnD+rLW9EyETBfzZ06Ck3HYwxIk0QOVW20ybfSwI21UYu3IS7Vw6T5Z7
ucya4K1j+Gz/wg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:15 2026 by rpki-client