Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
File:                     SJjKo3y70Riu0iofvIoLVbiAmNE.cer (raw, json)
Hash identifier:          QUmqy7PITztCGUIoOMchYr4TkxAHtspyOE9Cu0v2l40=
Subject key identifier:   48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C956
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 15:01:36 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 137895
                          IP: 103.116.25.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182614 (0x2c956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 15:01:36 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:af:63:e4:5c:8f:b4:35:da:48:4c:ae:27:
                    9e:48:5c:e5:59:77:d2:9e:72:85:4c:1e:1c:35:81:
                    a3:57:8a:a1:b3:fb:f4:b7:59:57:76:20:f9:e7:8a:
                    f0:d6:64:f8:33:3a:f8:57:2f:3d:ed:58:da:29:c5:
                    d6:60:a9:68:e4:5c:a0:75:c2:c3:01:34:2d:4d:4a:
                    a0:59:a3:82:49:55:80:1c:c1:bb:e2:c1:29:07:7d:
                    75:d7:a4:0c:1f:0f:d8:b3:29:d6:0e:ca:6c:cf:da:
                    05:3b:68:12:99:82:9f:32:9d:8d:05:b8:41:ff:a2:
                    eb:0c:0b:dc:84:28:0e:f0:ee:d8:9c:24:7f:79:70:
                    c1:55:77:be:06:a8:bd:f1:2f:9c:2e:83:f8:94:c0:
                    2f:0f:af:3e:5c:c8:4f:9a:0a:96:16:74:fd:6f:ee:
                    b5:d8:d9:b7:59:50:92:4f:20:4e:db:51:c6:15:e4:
                    f2:dc:f0:1e:72:dd:cc:ef:db:49:a1:3e:f4:c4:45:
                    ac:b4:68:27:c6:8e:5b:60:6c:e4:0f:c5:8b:32:d7:
                    b3:32:1a:9c:04:1e:87:3b:91:b1:33:0c:67:bc:94:
                    4a:5a:4f:d5:12:f1:e1:2a:64:8b:61:30:58:f2:a1:
                    1e:29:ee:42:1a:dd:b6:5e:f3:ee:8b:69:b0:9a:4a:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137895

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:34:65:f4:c2:45:43:42:bc:37:62:ee:cf:77:e1:16:b0:64:
         0b:c3:a2:e1:13:e4:88:96:ff:ec:01:84:41:3b:8c:b7:61:53:
         cd:4a:34:1d:57:11:3e:c0:d4:0a:ac:4e:01:07:f9:09:e0:be:
         a7:fd:e5:c7:85:a4:9b:c2:e3:ff:68:ca:0e:f3:2f:0a:ad:b6:
         4d:e8:3a:38:24:8e:3b:b2:da:39:3e:00:ac:01:4b:89:c6:97:
         c7:c8:e8:88:89:03:53:0e:19:ac:7d:11:54:08:4e:94:ba:9e:
         5d:52:e7:9c:78:c8:e4:c9:62:e7:ee:31:ea:68:4b:21:3f:97:
         56:6e:7b:de:e2:be:28:ef:3a:50:d3:8a:ff:6c:e1:00:61:1c:
         14:81:8f:12:24:b2:4c:ec:27:08:88:28:ca:09:c4:4a:68:29:
         f5:9b:f3:4f:93:60:06:d5:b6:52:f7:b9:54:4e:04:77:3f:41:
         32:07:fc:cb:64:b4:f4:c1:80:48:e4:6d:ad:93:b1:b3:50:3e:
         af:6e:78:4b:0f:be:aa:85:52:51:fb:2b:4d:cd:21:7c:b4:6b:
         f9:dc:76:0f:ae:fb:62:4e:2c:4a:b2:54:57:af:36:5c:4d:d3:
         67:cd:7a:97:4b:e0:d4:bd:43:7d:05:2b:1d:c0:84:6c:35:b2:
         b0:82:81:aa
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAslWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDczMTE1MDEzNloXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkEx
RkJDOEEwQjU1Qjg4MDk4RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJS69j5FyPtDXaSEyuJ55IXOVZd9KecoVMHhw1gaNXiqGz+/S3WVd2IPnnivDW
ZPgzOvhXLz3tWNopxdZgqWjkXKB1wsMBNC1NSqBZo4JJVYAcwbviwSkHfXXXpAwf
D9izKdYOymzP2gU7aBKZgp8ynY0FuEH/ousMC9yEKA7w7ticJH95cMFVd74GqL3x
L5wug/iUwC8Prz5cyE+aCpYWdP1v7rXY2bdZUJJPIE7bUcYV5PLc8B5y3czv20mh
PvTERay0aCfGjltgbOQPxYsy17MyGpwEHoc7kbEzDGe8lEpaT9US8eEqZIthMFjy
oR4p7kIa3bZe8+6LabCaSoSzAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUSJjKo3y7
0Riu0iofvIoLVbiAmNEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3REM2LzVDQTg0REU0MjI2RTExRUJCMDQ5QTg3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDN0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5
NzBSaXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhqnMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3QZMA0GCSqG
SIb3DQEBCwUAA4IBAQAYNGX0wkVDQrw3Yu7Pd+EWsGQLw6LhE+SIlv/sAYRBO4y3
YVPNSjQdVxE+wNQKrE4BB/kJ4L6n/eXHhaSbwuP/aMoO8y8KrbZN6Do4JI47sto5
PgCsAUuJxpfHyOiIiQNTDhmsfRFUCE6Uup5dUueceMjkyWLn7jHqaEshP5dWbnve
4r4o7zpQ04r/bOEAYRwUgY8SJLJM7CcIiCjKCcRKaCn1m/NPk2AG1bZS97lUTgR3
P0EyB/zLZLT0wYBI5G2tk7GzUD6vbnhLD76qhVJR+ytNzSF8tGv53HYPrvtiTixK
slRXrzZcTdNnzXqXS+DUvUN9BSsdwIRsNbKwgoGq
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:49:22 2026 by rpki-client