Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer
File:                     MR39neQF4HHYMSH7kCX7TyAkAyw.cer (raw, json)
Hash identifier:          oPZJAYXeF7Y+Zqwe+3Z2EhVyUfYkEI7sqntyLh0MCeA=
Subject key identifier:   31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CD88
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 16 Aug 2026 12:47:27 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 132270
                          IP: 103.71.242.0/23
                          IP: 2001:df4:a00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 10:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183688 (0x2cd88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 16 12:47:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:b7:cd:18:97:8c:f2:2c:2f:f3:75:f3:62:
                    46:84:fd:24:ee:25:e9:d7:16:b8:42:49:44:14:46:
                    6e:31:44:66:77:2e:2f:70:f9:79:36:87:4f:57:cb:
                    6c:57:63:30:a5:8e:8b:63:49:63:fa:89:27:54:af:
                    a3:9b:18:29:7a:56:53:3d:25:75:f8:76:e6:17:de:
                    a8:d3:82:ef:07:bb:28:ce:b8:36:2f:74:47:60:50:
                    57:66:b7:89:da:e9:26:68:c2:6f:78:ef:2a:1d:c5:
                    a0:62:33:56:52:84:35:52:b4:7e:56:31:5b:27:cc:
                    16:29:7e:b1:37:2e:ad:44:8e:4d:e0:ae:64:ff:8b:
                    a4:4c:86:06:d2:2c:4c:bb:67:67:28:1b:83:9a:da:
                    af:92:0b:8a:92:a9:35:62:7e:94:c9:8a:fe:e8:5c:
                    8f:ac:6e:fe:9b:b3:8e:77:98:32:4b:81:7e:1c:26:
                    a9:94:dc:10:70:c7:e2:a7:c5:3b:16:a7:09:5a:3e:
                    ea:3f:64:e1:ec:ca:2a:2b:c4:29:73:ef:bd:fa:80:
                    b5:61:1d:ca:54:da:fd:d3:4b:28:a0:26:87:84:59:
                    7f:df:41:c7:19:4f:7c:12:14:b8:63:12:9a:3e:0e:
                    60:a1:6e:c2:60:9f:8d:0c:b0:79:a8:14:94:f6:b5:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132270

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.242.0/23
                IPv6:
                  2001:df4:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:df:b8:d6:d0:9c:c1:0e:8a:c8:3a:ad:9f:37:60:e3:91:
         93:66:ae:11:e9:26:c1:b7:2c:20:df:0e:78:78:a1:8c:83:20:
         b9:b9:cd:45:0d:bf:85:16:28:0b:f6:94:53:c8:e4:01:63:97:
         fe:d3:ec:3b:79:48:ee:10:61:84:2f:d7:29:ca:3e:2e:7d:1e:
         9c:3d:8f:08:98:26:33:fd:19:bf:92:a7:37:3e:50:b7:f4:a1:
         fc:1c:a7:c0:6b:95:ae:3d:b5:b1:3a:9e:d5:ac:39:a6:7e:47:
         fe:3a:11:98:19:18:69:52:e4:58:46:78:ef:eb:9b:2c:a5:31:
         09:eb:6b:1f:21:8a:b9:67:c3:b9:a3:f0:4f:5e:a0:cd:73:78:
         f1:8b:52:13:a3:dd:04:57:92:73:b9:c7:b0:c2:88:02:de:0f:
         ac:f8:92:82:94:94:49:78:6c:1e:05:63:d7:8f:79:7e:43:29:
         c3:db:91:a1:a4:d8:d6:0c:7e:90:6e:4d:9f:9a:5e:b8:07:36:
         c2:15:22:39:05:e4:cf:f0:33:04:e3:78:67:03:91:47:43:12:
         2a:e9:3a:97:e4:09:d7:6e:15:0e:99:db:4d:3c:dc:ce:49:15:
         ba:4c:be:c6:9a:67:91:a3:73:d2:54:21:f3:b8:2d:6f:16:ed:
         b6:60:0f:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:21 2026 by rpki-client