Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.cer (raw, json)
Hash identifier:          /qZ+faEhtwod3yYBlGLcxm9TmIOw0NrWXLAEAaAEbtY=
Subject key identifier:   FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D120
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 29 Aug 2026 13:04:48 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 17929
                          AS: 38481
                          AS: 38551
                          AS: 38910
                          IP: 103.246.196.0/22
                          IP: 202.40.32.0 -- 202.40.127.255
                          IP: 203.2.96.0/20
                          IP: 2407:e500::/31
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184608 (0x2d120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 29 13:04:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:f9:cb:18:fb:e0:a7:d7:97:f7:e6:96:1d:
                    91:fd:7d:c3:c8:23:14:6b:eb:41:6e:c4:9d:07:7d:
                    4f:10:9c:d9:e4:46:7f:a7:7d:9a:65:c0:fb:fa:1d:
                    80:c7:84:d7:19:d0:be:0c:91:81:30:c4:b1:7d:1f:
                    01:8c:cc:06:45:89:27:65:17:64:bf:d7:f3:9a:e1:
                    98:60:58:62:4a:ae:3c:88:fc:94:6a:fc:b9:50:86:
                    fb:b1:41:2d:e3:67:5f:70:de:f8:c4:56:7c:90:17:
                    df:99:c2:87:a8:51:49:3e:5a:b5:e6:9c:14:80:76:
                    5c:b0:94:35:3a:44:6b:f6:5e:80:7a:da:a7:e1:1f:
                    39:bc:9e:c7:91:f4:75:3a:04:23:c2:6a:00:ae:6a:
                    a0:58:11:4b:79:27:ed:7a:1e:c1:2b:c0:5e:dd:ec:
                    13:f6:d0:d7:2b:5f:b9:56:a9:64:34:e5:9b:4d:1d:
                    e2:63:91:27:ae:d3:42:3a:17:28:c6:a4:8b:35:cb:
                    b4:86:05:37:f5:72:51:98:e6:ef:5c:75:94:a8:d8:
                    f5:86:cc:29:ae:65:e2:b7:22:77:3b:2c:44:ac:3f:
                    23:17:00:8e:9a:96:45:0c:ac:7f:09:19:af:2a:5b:
                    e2:d5:67:47:76:60:85:42:df:60:f1:9d:63:b2:64:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17929
                  38481
                  38551
                  38910

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.196.0/22
                  202.40.32.0-202.40.127.255
                  203.2.96.0/20
                IPv6:
                  2407:e500::/31

    Signature Algorithm: sha256WithRSAEncryption
         56:77:f4:a5:8e:a7:f5:f1:a7:03:01:b1:e6:38:c2:f2:af:15:
         b6:b3:bf:32:0e:4b:12:7f:db:39:57:5b:77:d2:f7:b2:5d:ad:
         c8:0f:5a:36:7a:44:51:9e:4d:c4:df:fd:86:60:41:a3:83:ac:
         ec:11:ac:dc:ae:97:cc:3d:fa:e7:3e:67:a4:d3:18:52:c0:70:
         10:fa:ba:71:e6:4b:b9:55:17:c2:d9:66:36:3c:2e:c2:5e:13:
         0f:ed:5a:c2:1f:fb:26:9a:8d:bd:d0:13:d4:d9:8a:40:2a:03:
         1b:f1:39:8c:40:c5:97:3a:d1:7a:6b:07:0b:8f:38:52:d3:1d:
         e2:7a:c6:11:6c:36:65:32:98:9e:7e:be:2f:1e:bf:64:60:cf:
         ec:ff:e2:60:32:77:99:ee:04:80:48:43:2f:e0:6e:07:fe:26:
         ea:6c:61:12:c2:54:1e:f4:4d:6e:f9:8f:9a:9f:be:64:39:98:
         eb:e5:f5:ea:d3:a8:18:5c:c8:8e:47:ec:11:0d:23:b6:9c:f1:
         3e:60:75:b0:54:e4:4c:b1:cf:02:94:85:06:f8:5e:ba:8c:91:
         8a:f8:ba:be:e7:94:b2:ed:ea:a1:e6:22:ba:8a:92:b3:00:f5:
         31:9b:ba:7a:72:8a:2f:06:1b:90:70:b7:fe:c8:eb:96:d8:d8:
         c0:93:05:2a
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIDAtEgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgyOTEzMDQ0OFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0
NTZDMTJCOTBGNjQyNDZDN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6u/nLGPvgp9eX9+aWHZH9fcPIIxRr60FuxJ0HfU8QnNnkRn+nfZplwPv6HYDH
hNcZ0L4MkYEwxLF9HwGMzAZFiSdlF2S/1/Oa4ZhgWGJKrjyI/JRq/LlQhvuxQS3j
Z19w3vjEVnyQF9+ZwoeoUUk+WrXmnBSAdlywlDU6RGv2XoB62qfhHzm8nseR9HU6
BCPCagCuaqBYEUt5J+16HsErwF7d7BP20NcrX7lWqWQ05ZtNHeJjkSeu00I6FyjG
pIs1y7SGBTf1clGY5u9cdZSo2PWGzCmuZeK3Inc7LESsPyMXAI6alkUMrH8JGa8q
W+LVZ0d2YIVC32DxnWOyZOoFAgMBAAGjggNAMIIDPDAdBgNVHQ4EFgQU/qS5bzmD
92nHM5dFbBK5D2QkbHwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZEMzZBLzM3QUJENzA4QUE5QTExRTdCQUM0MTI1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1Ynpt
RDkybkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKAYIKwYBBQUHAQgBAf8EGTAX
oBUwEwICRgkCAwCWUQIDAJaXAgMAl/4wQgYIKwYBBQUHAQcBAf8EMzAxMCAEAgAB
MBoDBAJn9sQwDAMEBcooIAMEB8ooAAMEBMsCYDANBAIAAjAHAwUBJAflADANBgkq
hkiG9w0BAQsFAAOCAQEAVnf0pY6n9fGnAwGx5jjC8q8VtrO/Mg5LEn/bOVdbd9L3
sl2tyA9aNnpEUZ5NxN/9hmBBo4Os7BGs3K6XzD365z5npNMYUsBwEPq6ceZLuVUX
wtlmNjwuwl4TD+1awh/7JpqNvdAT1NmKQCoDG/E5jEDFlzrRemsHC484UtMd4nrG
EWw2ZTKYnn6+Lx6/ZGDP7P/iYDJ3me4EgEhDL+BuB/4m6mxhEsJUHvRNbvmPmp++
ZDmY6+X16tOoGFzIjkfsEQ0jtpzxPmB1sFTkTLHPApSFBvheuoyRivi6vueUsu3q
oeYiuoqSswD1MZu6enKKLwYbkHC3/sjrltjYwJMFKg==
-----END CERTIFICATE-----
Generated at Mon Aug 31 12:02:28 2026 by rpki-client