Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
File:                     UaPqilmxE10_cJKFLMv2DJnGPPc.cer (raw, json)
Hash identifier:          l94v9R8wFaoG6HFczeYa6m/C62+xzgjzJ8IJ9h381AQ=
Subject key identifier:   51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C920
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 14:04:02 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 150108
                          IP: 103.122.222.0/23
                          IP: 2400:f160::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182560 (0x2c920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 14:04:02 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A918664E, serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:1b:f8:5f:f8:61:b8:c2:c9:59:83:59:7c:
                    31:34:00:7e:f4:b6:46:d2:44:c5:19:20:96:e9:1c:
                    83:2f:b8:12:bc:b6:15:8c:91:c1:01:3f:78:ce:a1:
                    3d:67:96:ba:45:af:de:8f:8f:a5:e8:66:c9:f9:77:
                    38:a1:6f:d3:ca:a5:7a:fa:6f:21:a0:b2:75:75:a7:
                    9c:f4:84:75:0d:7e:25:5c:dc:40:0e:44:0d:26:69:
                    09:e1:0a:8a:bd:c1:66:9f:50:17:cb:5c:0a:d3:74:
                    ab:d2:01:5a:03:9d:bf:09:65:80:cf:1d:9e:1b:c6:
                    1a:04:a7:77:4a:4c:aa:c4:ee:4c:4b:25:de:28:fc:
                    1a:2b:83:c5:33:cc:af:bc:64:70:4d:71:4b:87:15:
                    ce:7a:c0:9f:19:8c:e8:ce:0c:bd:29:d4:29:08:51:
                    ef:40:46:25:c3:42:62:13:d5:0c:4b:25:a4:23:45:
                    de:1b:c4:6c:23:8e:1c:bb:89:db:5a:f3:71:6a:9f:
                    a6:42:2b:63:69:ed:7b:4d:16:e8:ae:60:9d:31:6c:
                    cb:04:eb:36:de:39:8c:2d:86:8b:38:9a:75:94:f7:
                    dc:cd:fb:58:69:ab:2d:2c:2f:74:ea:66:ba:7a:40:
                    66:03:5e:a1:2b:cc:e7:e9:6f:59:2f:9e:bf:e8:76:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150108

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.222.0/23
                IPv6:
                  2400:f160::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:13:42:0e:f4:12:9c:db:a6:8b:f9:e4:4a:db:e6:3d:d8:
         83:94:84:16:74:25:18:7b:ff:32:77:b7:2f:ae:a3:44:99:c7:
         f8:6c:c6:49:56:d5:a6:bb:7d:d4:b4:eb:8e:9f:6b:04:55:e4:
         ad:e0:8d:50:78:d8:2e:68:7d:40:d8:3c:29:74:f6:88:49:99:
         d3:23:b6:b0:06:9d:7f:dd:4b:15:e1:61:69:3f:fa:cb:3e:1a:
         06:6b:13:20:3d:88:4f:d3:33:32:9f:c0:77:41:35:54:33:17:
         e8:ca:ab:14:cb:68:68:a9:1b:00:b8:71:89:9c:fe:59:63:bd:
         6b:5c:65:5e:5d:06:d4:f4:78:7a:d9:b2:58:35:4c:8e:b5:d4:
         2f:63:88:54:f1:ae:40:cd:f7:d1:29:25:fb:a6:f3:89:ed:8b:
         49:6e:f7:8e:b4:9b:2b:d2:18:ea:10:43:80:b3:34:65:26:59:
         3e:26:40:7e:83:df:24:74:7d:6c:a7:ba:5a:8d:47:fe:bb:7f:
         84:8b:ca:19:a8:cd:c7:d0:36:d0:40:cc:68:52:90:51:42:c4:
         83:b1:ee:db:b3:67:e3:30:9a:28:0a:d9:c6:43:ed:ed:45:0c:
         18:aa:d6:66:b6:ca:bb:0d:54:ff:47:a4:3a:e2:c0:47:7a:a5:
         21:37:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:07 2026 by rpki-client