Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
File:                     atr7oploMMUdaBwyEtBLXHJMEx0.cer (raw, json)
Hash identifier:          Bcd8Kan9hIttj+xBUlkU/AA5+WldrrxlysEc8VHoyYk=
Subject key identifier:   6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0248DF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 May 2025 04:54:08 +0000
Certificate not after:    Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38207
                          IP: 103.5.188.0/22
                          IP: 110.172.16.0/21
                          IP: 219.90.96.0/20
                          IP: 2402:4300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 07:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149727 (0x248df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 27 04:54:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:56:4d:d4:c5:81:cc:9b:3e:86:82:08:01:
                    14:ec:f9:d2:8c:6e:d5:8c:75:aa:20:40:df:cb:58:
                    f6:6f:1f:b1:d5:d9:24:99:bb:1f:2e:4f:46:9a:a5:
                    f7:35:ad:72:53:ea:8a:ba:cc:38:16:12:4b:90:8a:
                    81:5b:f7:f8:a4:46:f3:db:e3:c4:8c:ee:0d:03:dd:
                    e5:32:e9:d7:fa:e1:1e:42:bb:0e:3f:a7:17:8a:26:
                    b4:75:f2:bf:1b:83:04:a0:77:3c:ef:58:0b:c8:5f:
                    24:82:05:a1:47:f2:8c:9a:9a:be:68:b1:3b:f3:4a:
                    a4:31:69:06:24:e1:aa:3f:30:57:65:df:16:04:4f:
                    55:f9:eb:91:58:f0:5f:31:fe:78:43:df:24:36:00:
                    27:f8:25:74:80:b9:df:d6:3f:d4:58:8e:1d:ff:17:
                    13:15:23:3e:3f:d0:85:2c:a4:2f:6e:43:dc:0f:e9:
                    2f:52:75:7c:15:a3:e4:a3:15:dc:93:79:a1:77:e2:
                    7c:8b:1d:ca:24:b3:32:5f:49:24:90:ae:d7:3f:fd:
                    4b:39:4a:b2:73:27:c7:39:45:40:0c:ca:f0:9d:04:
                    d1:64:dd:09:e3:f1:99:a5:7f:99:b9:43:bd:59:7c:
                    0f:07:bb:a8:f8:62:05:87:68:23:70:57:3f:ac:93:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38207

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.188.0/22
                  110.172.16.0/21
                  219.90.96.0/20
                IPv6:
                  2402:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:fb:90:53:11:58:03:02:93:54:bf:17:f5:f0:d4:ef:9c:22:
         d7:74:3c:1e:22:55:6e:cd:b5:f7:37:48:3f:2d:63:21:e4:c1:
         de:23:89:13:08:47:39:67:0b:4d:b7:ac:16:b5:d5:20:e6:57:
         8e:69:1c:fc:8b:42:53:2f:be:23:7e:2c:a4:ac:c7:c1:db:d3:
         d6:06:4f:f9:d7:95:81:ef:28:cd:b9:a5:b5:aa:f8:09:6c:26:
         e1:c4:5a:61:5f:55:89:bd:64:b9:74:28:43:10:25:14:6a:15:
         f9:c3:d0:e8:f2:21:aa:72:3f:48:3a:8e:10:30:1f:82:97:71:
         47:a0:05:01:53:e6:45:11:0c:07:22:08:76:f2:fd:d9:35:e1:
         38:62:19:15:eb:87:38:b4:b8:d7:9d:75:9f:f4:a1:d2:aa:78:
         9e:29:98:25:1f:8c:15:96:55:6f:45:4b:34:58:87:49:d8:f1:
         e3:2b:f6:f8:31:d6:17:8c:15:d8:17:da:56:fd:4f:9f:ca:c5:
         29:10:05:11:d6:d5:0e:25:65:aa:ed:53:00:49:ac:02:dd:a0:
         57:55:35:4f:12:ee:5d:e3:14:b5:4a:82:99:dd:46:53:0c:0b:
         74:1d:96:05:21:7c:9d:0b:b3:7e:a2:68:0b:c2:db:2c:3b:4b:
         f4:05:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:42:02 2025 by rpki-client