Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer (raw, json)
Hash identifier:          03heBzBi70w8AYgvYStKVNIy/syJ05myHG3NIugwwOA=
Subject key identifier:   46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02DA9C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Oct 2026 13:47:48 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 141164
                          IP: 103.155.145.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 18:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187036 (0x2da9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 13:47:48 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:ba:64:7c:a8:bc:8d:01:9b:8f:97:0a:39:
                    2f:d9:b4:53:f0:9a:16:94:b3:df:99:1e:8a:ba:26:
                    51:23:45:6c:2f:ab:c5:3e:25:f3:2a:30:ff:01:2b:
                    78:16:8e:03:b3:92:88:87:61:1e:1d:3b:da:fa:81:
                    20:68:58:11:fe:a4:92:49:34:99:ee:59:70:c3:c0:
                    64:8f:68:ba:c8:77:a9:a7:b3:bc:b8:ca:ca:00:6c:
                    d5:8f:36:26:0b:a2:18:e0:34:ee:e3:57:0e:8e:54:
                    bb:f1:22:d2:4e:79:2c:c2:c6:7a:f3:b8:1f:50:4c:
                    be:d4:d8:45:a8:dd:c1:34:f3:73:7b:5f:01:a1:2f:
                    dd:81:2e:2c:aa:ec:23:cb:54:a5:09:86:1d:37:e9:
                    50:3f:d4:c5:eb:33:a5:97:a7:da:44:74:bc:aa:76:
                    88:8c:0e:ed:c0:d0:cd:2d:10:45:46:c7:2b:08:01:
                    0e:b4:22:23:ec:4e:40:62:4b:97:b9:ec:65:57:f2:
                    23:0a:8a:d3:ea:3d:2c:61:d1:e3:47:a3:db:d7:61:
                    f7:5d:06:af:8d:a7:ca:45:de:05:c3:9b:5e:11:9d:
                    14:2d:f4:8b:7b:d1:32:69:7c:fa:58:59:25:80:1a:
                    6a:05:b9:64:0b:7e:c2:00:5b:da:41:0a:4d:8e:67:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141164

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:11:f6:22:28:f5:02:0c:65:86:52:d8:ec:96:62:31:74:
         9c:29:c3:da:c9:a2:f2:69:85:94:0f:87:fc:82:c3:39:b3:4d:
         7e:3a:6a:b1:7c:74:3f:0f:15:2d:3a:9c:1f:2a:f6:12:dd:a8:
         d7:ed:9c:96:b1:57:7d:63:a5:8e:3f:10:5c:83:66:53:c5:9b:
         dd:2f:0d:13:0d:55:93:43:de:30:c9:4a:ec:9f:45:e1:f4:54:
         8b:6e:76:5c:3d:2d:04:52:6f:e6:85:be:67:76:e2:4d:12:de:
         c4:7f:7b:d2:fd:4c:a9:56:12:0a:5d:0d:81:b7:04:d1:8f:85:
         6d:79:f8:fe:b0:a7:df:2f:6e:32:3f:b5:d9:83:b8:55:aa:ff:
         29:02:b8:01:07:b8:35:2f:39:9d:13:d1:31:ce:f4:5b:11:96:
         77:d0:d6:ce:f1:01:20:e2:71:bb:19:bc:49:80:c1:55:35:4d:
         72:21:81:cf:da:aa:27:9d:f0:22:da:06:3e:ef:9e:76:25:12:
         fa:b3:a5:53:dc:51:43:30:c7:9f:8c:64:d8:19:28:08:ae:fd:
         c3:be:0a:50:4f:eb:30:3e:63:09:ba:c1:32:bf:8f:46:37:2b:
         2a:42:d5:12:79:b0:99:bd:d6:8d:4f:5f:13:9c:29:fe:cc:a9:
         04:ff:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:37:37 2026 by rpki-client