Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.cer (raw, json)
Hash identifier:          rnGasKGKWnmAuqv/BHFbbPRl2ESmva1TVrcf/9DCuMk=
Subject key identifier:   40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0244FE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 08 May 2025 15:41:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 142044
                          IP: 103.81.55.0/24
                          IP: 103.165.161.0/24
                          IP: 2001:df6:6d80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 07:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148734 (0x244fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  8 15:41:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:50:0b:43:da:4a:5d:c7:4d:c9:92:d2:86:
                    2f:57:70:ee:42:43:62:f0:b7:fe:84:58:83:bc:49:
                    97:17:54:26:8b:49:8e:14:36:14:e2:ed:cc:e5:c1:
                    a4:37:97:1c:c4:da:f5:3d:3d:d8:e2:5b:2f:73:4e:
                    67:c6:10:76:2a:16:86:5a:ae:76:84:e8:c2:13:41:
                    d8:07:4c:c8:99:64:b4:85:f2:c0:d8:25:6e:c6:d1:
                    22:78:4b:e5:31:67:a0:c3:e5:e9:87:0e:24:eb:9c:
                    c2:f9:8b:01:49:a7:61:ef:6c:82:09:a4:be:51:87:
                    70:92:9d:c9:31:17:fe:fd:0b:6c:fb:39:b7:07:91:
                    d8:8f:8c:32:28:61:ec:ca:37:fb:63:22:ef:09:54:
                    9c:21:52:ec:1d:20:5b:91:69:e4:c3:6f:06:dd:bf:
                    41:59:e7:11:5a:0f:8c:87:03:0e:24:ee:fc:d1:b2:
                    83:5e:e8:ce:0e:da:00:04:39:07:c1:7f:3a:35:d2:
                    d2:69:e5:3f:5e:cd:15:dd:51:c1:02:90:41:ac:b5:
                    4d:95:0f:6d:d1:8c:f0:5f:fe:34:36:01:ff:00:13:
                    e3:15:af:6b:38:9c:7d:94:4c:9c:aa:a6:52:e1:49:
                    56:96:82:cd:80:8e:34:77:6f:8f:d8:01:11:b8:b3:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142044

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.55.0/24
                  103.165.161.0/24
                IPv6:
                  2001:df6:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:04:64:30:a8:50:41:66:2b:9c:76:d8:b8:fc:22:95:d4:
         61:15:bf:e5:e5:20:3a:9f:96:75:62:5b:81:07:5c:a3:d6:ff:
         00:10:4d:c8:67:23:47:bc:d3:ab:94:32:de:b3:bd:40:67:76:
         b9:bc:a0:6e:e9:25:64:a2:73:75:5e:56:26:19:58:30:ff:35:
         07:7b:23:63:6c:8f:af:f3:0c:d8:2c:40:e4:9b:64:9b:8b:ed:
         28:37:b9:6b:e8:66:6a:54:d4:9e:b5:47:28:85:21:47:3f:df:
         59:63:08:8f:97:42:e7:32:7d:05:81:d7:ce:ef:a4:4b:f9:5b:
         34:77:04:3c:68:df:c8:5e:3e:55:48:7f:54:02:18:18:10:2f:
         ec:06:80:c8:ef:79:d2:dc:ae:d4:f0:25:98:91:f2:cf:05:40:
         a1:7e:b5:a8:1e:a6:5e:f5:00:87:bf:ab:d3:06:eb:16:d4:44:
         f8:25:8d:78:eb:ee:f2:c4:fa:00:73:f4:91:e1:2f:dd:81:c4:
         e8:e6:f8:81:9d:dd:d4:0e:de:f7:14:52:65:85:6f:2d:48:7c:
         d4:cc:1b:28:9b:a9:5e:b6:5f:8e:d1:0a:88:09:27:d9:86:7f:
         0b:62:dd:a6:f7:96:9d:42:5d:a9:a1:30:71:d2:31:50:2f:00:
         c9:ef:6f:85
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAkT+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwODE1NDEyOFoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUQ5NjMxMTAvBgNVBAUTKDQwQzVCRDNERTk1MkI5MkU5NTkyMUE0
RkQ2REY3REIwN0I0QTI5MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtQFALQ9pKXcdNyZLShi9XcO5CQ2Lwt/6EWIO8SZcXVCaLSY4UNhTi7czlwaQ3
lxzE2vU9PdjiWy9zTmfGEHYqFoZarnaE6MITQdgHTMiZZLSF8sDYJW7G0SJ4S+Ux
Z6DD5emHDiTrnML5iwFJp2HvbIIJpL5Rh3CSnckxF/79C2z7ObcHkdiPjDIoYezK
N/tjIu8JVJwhUuwdIFuRaeTDbwbdv0FZ5xFaD4yHAw4k7vzRsoNe6M4O2gAEOQfB
fzo10tJp5T9ezRXdUcECkEGstU2VD23RjPBf/jQ2Af8AE+MVr2s4nH2UTJyqplLh
SVaWgs2AjjR3b4/YARG4s7WjAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUQMW9PelS
uS6VkhpP1t99sHtKKSEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVEOTYzLzkwRTgwQkM4OTdFMjExRUI5QjM5RDUzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVs
U3VTNlZraHBQMXQ5OXNIdEtLU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAircMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ1E3AwQAZ6Wh
MA8EAgACMAkDBwAgAQ32bYAwDQYJKoZIhvcNAQELBQADggEBAFWxBGQwqFBBZiuc
dti4/CKV1GEVv+XlIDqflnViW4EHXKPW/wAQTchnI0e806uUMt6zvUBndrm8oG7p
JWSic3VeViYZWDD/NQd7I2Nsj6/zDNgsQOSbZJuL7Sg3uWvoZmpU1J61RyiFIUc/
31ljCI+XQucyfQWB187vpEv5WzR3BDxo38hePlVIf1QCGBgQL+wGgMjvedLcrtTw
JZiR8s8FQKF+tagepl71AIe/q9MG6xbURPgljXjr7vLE+gBz9JHhL92BxOjm+IGd
3dQO3vcUUmWFby1IfNTMGyibqV62X47RCogJJ9mGfwti3ab3lp1CXamhMHHSMVAv
AMnvb4U=
-----END CERTIFICATE-----
Generated at Fri May 30 09:16:25 2025 by rpki-client