Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
File:                     Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer (raw, json)
Hash identifier:          LWYNpyfWsXyPADuTnkp+yTk96RDDSs043k+sZnQ87BI=
Subject key identifier:   43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CDB9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Aug 2026 04:48:24 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 131206
                          IP: 103.68.92.0/24
                          IP: 2001:df0:7e80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183737 (0x2cdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 17 04:48:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91B0E2D, serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:fd:99:d1:fe:ac:cd:45:75:8e:a5:92:0a:
                    ee:ed:88:81:e6:a4:e0:6e:e4:6a:ad:a9:0c:33:02:
                    8a:1a:58:ee:1b:b0:3f:5f:ef:5c:ba:3a:c2:68:67:
                    1e:0d:49:7c:d1:e0:78:f3:ab:96:d5:10:22:9b:d7:
                    fe:5a:5a:b3:c6:2a:a7:ed:71:0b:5e:5b:c9:b1:91:
                    b1:c6:72:ae:a6:b1:1a:49:05:1a:62:f2:5f:91:ca:
                    19:12:0f:47:c7:ba:16:dc:01:09:a0:a4:78:0f:5d:
                    37:d8:fe:ee:5e:49:d4:ee:79:1e:06:a6:ea:a7:6f:
                    2d:dd:70:4d:8d:9f:8f:f2:46:de:cb:f0:1e:27:be:
                    f0:3b:36:d9:ea:42:e3:d5:1d:25:f0:1a:29:16:00:
                    d3:57:2d:8d:bb:7d:8f:08:75:b4:96:c9:23:12:2f:
                    e3:d4:fd:74:54:b4:f2:7f:18:6b:d4:42:1e:c6:bf:
                    12:6f:09:94:ec:93:c4:de:b5:d9:38:e3:b0:4f:42:
                    c3:0b:81:69:6c:8e:4c:39:3c:ed:3a:61:07:1e:38:
                    b1:9d:63:9e:6a:66:59:71:47:f4:32:df:e7:9a:1f:
                    6c:f3:6a:4e:e1:75:98:ee:e8:49:a8:06:35:15:f3:
                    ed:17:46:ea:97:31:7f:87:94:3f:f5:89:de:95:d2:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131206

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.92.0/24
                IPv6:
                  2001:df0:7e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:23:da:8a:0a:c2:df:21:ad:00:70:88:8a:17:c1:17:31:
         93:89:dd:97:9b:4a:be:57:19:25:15:29:55:dc:6b:f9:08:f2:
         55:c7:47:fb:bb:6d:44:04:52:e4:eb:76:db:2c:56:42:ea:c4:
         7e:00:18:e6:fd:e2:18:a4:70:f4:73:a1:4c:9e:40:dd:fd:19:
         02:b5:24:86:be:f0:3d:99:de:88:fe:b8:68:35:05:f1:9c:89:
         0a:80:c9:2b:35:7b:a1:d9:9c:1e:3f:8e:31:56:97:41:50:bd:
         c6:09:2a:bf:99:56:8a:03:73:c1:dd:56:f1:f0:45:25:f6:81:
         9d:76:ee:83:3d:a2:4e:d1:0f:99:2c:16:ae:93:34:cc:f7:a0:
         36:fa:0d:44:e2:ff:36:c0:32:93:cb:93:80:0c:5d:a1:ef:2e:
         73:6b:f8:9f:9c:ae:43:ec:1b:14:67:ff:19:ec:5a:af:cc:d6:
         f2:48:c1:76:b6:c3:4e:20:3b:6c:8b:a4:81:13:57:c7:89:17:
         a4:e3:db:6b:0b:4e:f1:09:fb:66:37:e6:dd:78:f1:7b:fc:88:
         b0:81:34:18:03:c3:02:22:19:21:48:86:f6:ef:0f:9e:c5:48:
         b1:c0:ee:59:58:0a:b5:25:fc:b8:89:29:c3:7d:1d:40:1a:eb:
         35:15:15:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:04 2026 by rpki-client