Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
File:                     PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer (raw, json)
Hash identifier:          A8ZsZ84J5wO/jJhP8tIpaj+ZKgs9e0hfHlRcOVehx5g=
Subject key identifier:   3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BBD7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 08 Jun 2026 13:32:14 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 149998
                          IP: 103.190.90.0/24
                          IP: 2001:df0:e8c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 05:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179159 (0x2bbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  8 13:32:14 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:27:77:45:8a:b8:e0:10:19:26:5a:84:cc:
                    c7:e8:fe:05:41:bb:a0:9e:5d:08:ce:bd:79:7f:0a:
                    60:7e:0b:af:26:71:a4:4c:02:6c:d9:df:1f:0e:89:
                    73:41:e0:e3:89:e7:f8:37:6c:e7:84:99:d9:d6:9e:
                    43:db:8c:99:32:63:67:c6:fb:c9:8c:71:19:a7:30:
                    2a:d4:74:7a:03:1f:8b:15:9d:9f:de:b2:9c:bc:39:
                    46:7f:18:9b:c4:9f:71:c7:60:65:38:74:05:a0:fa:
                    ad:55:a8:a6:a3:a4:51:a9:7d:d0:da:4b:a8:a2:e7:
                    77:de:8a:5c:9b:52:a2:05:9e:ad:01:ae:24:23:f8:
                    fa:7a:7a:1b:ef:67:36:46:cb:e2:40:0d:06:f1:c8:
                    a0:5e:0c:80:27:3e:26:c3:35:8f:e3:e6:ac:ed:ef:
                    e2:fc:24:8b:02:83:70:a4:bc:0b:2d:37:6d:e6:3e:
                    8b:b9:b3:fa:d2:d4:5b:49:34:50:15:58:e7:91:24:
                    94:b2:d2:0d:58:2b:e3:71:9c:b9:b0:6d:c8:68:2d:
                    46:a3:19:dd:f2:78:ed:33:14:41:13:9d:01:e4:2c:
                    ec:6d:11:0f:0b:5e:b7:ce:f3:f8:5d:c5:13:13:38:
                    3b:b0:fb:0a:81:67:c6:8b:65:f2:bc:ef:d0:cf:be:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149998

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.90.0/24
                IPv6:
                  2001:df0:e8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:bc:a1:85:1a:96:fe:ce:96:6f:3b:30:40:cc:5d:09:2e:bb:
         bd:36:53:3c:5b:6b:b8:fb:0b:9d:bc:94:c0:90:fb:e1:c7:e7:
         b9:31:12:13:8a:94:31:a7:0b:55:3b:32:0a:d0:96:05:54:ec:
         19:7f:c8:57:d8:3f:68:4f:e4:22:3e:ab:c1:81:4d:13:40:92:
         46:e8:3d:5f:81:84:c0:30:e8:2e:c9:4c:c5:84:4c:28:62:2f:
         96:85:20:00:42:c2:2d:dd:aa:4f:c7:42:74:c0:70:f6:d1:11:
         34:46:88:1a:63:b2:12:46:a6:a9:dd:60:96:1a:87:74:af:78:
         2d:ca:86:53:85:62:0c:a8:e5:ce:95:85:4e:0d:31:ea:4b:79:
         12:3f:85:98:13:51:88:23:ca:9a:3b:10:88:1e:2d:95:33:1c:
         a1:46:74:2e:3d:64:e3:c1:86:15:f1:d6:55:d7:20:e7:47:74:
         0b:2a:a1:09:6c:cc:2b:ea:d9:60:12:e5:f9:0a:ff:df:f4:01:
         e4:3f:92:64:c9:04:59:07:cc:49:86:1a:e1:51:e5:c5:d1:f7:
         ac:e4:68:b8:10:e4:cd:63:e2:c5:84:fd:52:a5:6a:58:33:b3:
         0b:ad:a3:3d:68:40:0d:dc:b5:e9:21:bc:49:84:4a:6e:b4:94:
         3b:56:bf:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 24 10:17:17 2026 by rpki-client