Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
File:                     UhSSEEqxqLu-vYCplinU4uZjI3A.cer (raw, json)
Hash identifier:          +hVNAUCQudAxdHDiX6EHtiIl+HOp1moWxGmvu2asAQE=
Subject key identifier:   52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       025E37
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 19 Aug 2025 04:37:53 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 58634
                          IP: 103.2.192.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 11:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155191 (0x25e37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 19 04:37:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:0c:99:53:89:96:da:29:fe:f9:8a:78:e1:
                    59:f1:5e:4e:2a:2c:45:e5:14:4d:8a:01:4c:a6:23:
                    92:95:31:62:49:46:e0:49:62:7e:78:65:d7:a3:23:
                    e8:7b:ed:63:ed:0c:a7:80:bf:09:05:7b:ac:6a:31:
                    73:a6:b9:cd:8c:29:64:49:ed:ed:03:76:58:34:10:
                    c6:6d:7a:41:45:5e:4c:6d:42:26:ad:c2:16:84:eb:
                    9c:24:d3:a9:5f:56:dc:7f:ff:dd:8f:f3:ed:2f:a0:
                    ca:ba:b0:7b:8f:50:68:b1:a1:2b:65:42:fa:05:66:
                    1b:49:87:8f:46:f1:32:94:4b:ae:37:dd:da:61:15:
                    00:74:5e:6a:f9:67:59:9a:c9:ab:40:30:6a:18:ff:
                    25:52:bb:fd:bb:22:e3:7a:a8:93:04:63:68:ff:25:
                    c8:4b:86:b0:c2:45:aa:28:32:84:b6:15:a3:f9:01:
                    91:19:e8:65:27:5f:ea:95:83:9a:13:bb:32:d0:72:
                    55:16:88:11:5a:4d:61:cc:ee:0c:ed:27:ae:82:19:
                    a4:ac:87:5a:21:67:ee:af:13:ec:ba:02:13:7c:57:
                    fb:82:53:51:44:df:a6:6e:e1:ea:e0:4c:ba:f5:3b:
                    cd:84:a0:9d:fe:4c:a6:02:a1:33:6a:2a:7c:de:9e:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58634

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:c5:97:88:7e:1a:72:08:e4:c7:fe:71:00:5e:6a:56:68:46:
         75:5d:f6:91:dc:90:f2:5f:23:25:48:48:2e:10:26:bd:4b:bb:
         23:b2:58:73:1c:07:88:62:7c:16:e1:07:0f:7f:a8:64:11:98:
         80:05:4e:b5:56:95:9e:2f:ee:cc:96:7d:34:89:e2:93:b2:77:
         bf:90:17:62:aa:4a:ae:15:58:0a:62:12:5a:e5:57:99:60:71:
         f8:78:9c:61:12:73:cb:78:63:78:7c:68:7f:e8:9e:86:85:ff:
         8e:d8:db:b7:6c:c9:28:0f:3d:79:5b:9d:5e:fb:d5:4a:34:c3:
         bc:28:2f:4b:ab:13:6a:fe:af:32:31:c6:2f:be:29:fb:13:ad:
         47:1e:b3:ab:ef:5e:b5:42:02:97:0d:a8:d6:bc:df:08:0d:1f:
         61:48:09:fa:d4:6c:e0:19:4c:99:17:b4:75:96:ba:1c:eb:47:
         a8:32:3b:a8:dd:7c:99:b1:8a:24:22:ce:ec:b6:22:bf:a0:2b:
         d8:93:3c:31:71:dd:2b:13:ef:81:d6:d1:2f:d3:db:6a:84:f9:
         46:87:6c:6e:8f:c4:87:3a:7d:81:8d:6d:e8:15:b1:e5:16:38:
         bf:50:28:08:e6:06:07:d2:29:f6:4f:eb:86:f2:40:15:7b:61:
         2c:29:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:21:50 2025 by rpki-client