Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.cer (raw, json)
Hash identifier:          ctfX0zDk2HO4U6X9rrUUNVgvYTFTQM1Oh8LAgnSNSJ0=
Subject key identifier:   45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CD19
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 13 Aug 2026 13:52:16 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 141148
                          IP: 103.155.84.0/23
                          IP: 2001:df4:bd80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183577 (0x2cd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 13 13:52:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:08:cb:d4:35:61:a9:24:8e:4b:fb:5a:1f:
                    b4:27:39:16:92:ae:8e:4b:8e:e0:88:e3:b0:68:bb:
                    18:40:03:00:e8:9c:da:67:d4:96:d2:2f:22:0a:ce:
                    f5:3c:e5:e1:09:f1:d1:56:a6:76:1d:3a:42:af:d4:
                    a4:25:fa:9c:26:dc:c9:55:a6:0e:fd:20:c8:03:8d:
                    b3:15:9e:34:97:79:d1:5d:7d:2c:86:89:9d:df:c2:
                    b0:53:bc:85:08:76:b6:5a:c0:e9:84:1b:2e:d1:29:
                    f2:55:7e:70:23:1e:2c:35:59:68:ee:cb:d8:ef:66:
                    10:59:eb:af:00:f5:07:2c:35:be:5c:46:16:6e:90:
                    e4:3e:be:26:02:99:75:89:b5:50:22:dc:29:8a:34:
                    f1:ae:d5:8a:27:ba:2d:c6:36:24:cd:8b:da:bb:9e:
                    f5:2c:b9:4f:dc:b1:db:91:7e:f2:8f:c3:d1:18:3a:
                    2b:79:01:3b:84:45:4c:8f:d9:f2:3a:28:0f:fc:84:
                    c5:ee:90:8a:62:4c:6c:5a:3e:ca:1a:af:b8:15:92:
                    92:2f:98:f0:2a:77:92:07:7f:dd:cb:19:d1:2c:39:
                    3f:ba:4c:72:8b:a0:4f:3d:ff:b5:2a:9d:3b:d3:8c:
                    6b:62:d5:f6:27:e6:fd:ac:07:a9:cf:62:3f:89:24:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141148

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.84.0/23
                IPv6:
                  2001:df4:bd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:a6:dd:56:3e:51:8f:82:ad:47:90:1f:ba:90:e0:09:dc:
         01:9a:12:eb:33:fe:14:45:4b:a9:68:a9:cb:4a:80:00:89:48:
         9d:d3:3a:51:81:0e:7b:fb:e8:01:81:cb:c8:6d:89:fd:41:03:
         0c:57:80:6b:6e:34:da:e6:4f:8c:19:2c:3c:d5:b9:f8:b4:92:
         ca:d7:11:1b:97:b6:4b:11:2a:0a:1c:c5:b5:1a:34:1c:b0:c9:
         7e:8b:35:d6:a6:9d:57:fd:f4:70:e1:cf:1d:2a:c4:7c:23:a3:
         8e:27:c8:23:39:72:56:6f:35:0c:66:99:47:f6:bc:de:76:08:
         4f:8a:33:97:78:c7:52:0b:37:94:9b:db:55:25:c0:09:c4:96:
         66:79:c8:fc:cd:1e:86:d9:ca:5b:de:23:55:09:1d:41:dc:e6:
         21:06:97:18:23:2e:eb:2b:e1:35:69:2e:6e:51:cd:d3:f1:a0:
         b8:74:f0:96:90:96:15:22:95:bf:1c:cc:96:5f:c9:21:43:6f:
         64:57:46:c2:28:7d:fb:82:21:0a:c1:c8:bc:ae:a8:66:9b:bf:
         ae:ed:b1:ee:b7:e3:65:9b:ec:49:a7:9d:a7:2d:f7:66:52:b9:
         d4:51:ab:20:59:21:6f:13:af:69:6a:14:db:49:d5:66:10:e6:
         bf:77:8a:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:15 2026 by rpki-client