Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
File:                     bRdadMGgmL-i337kNxYF_2owQkk.cer (raw, json)
Hash identifier:          W/No/BuPKKXH4EwQ3gqrVCoeMfpNz+yWElj9BpK9vUo=
Subject key identifier:   6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CA20
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Aug 2026 15:21:04 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 45472
                          AS: 56079
                          AS: 139663 -- 139664
                          IP: 103.22.196.0/22
                          IP: 115.31.88.0/21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182816 (0x2ca20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 15:21:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:0a:a3:ba:0d:1d:19:29:3e:05:e2:ab:df:
                    dc:9a:87:87:18:10:e6:49:4a:b5:ac:53:ec:85:7e:
                    c2:a7:94:e4:b0:1e:af:26:b0:ea:60:24:80:02:99:
                    cf:85:53:db:51:82:a0:1e:b3:b7:04:d9:97:6b:8c:
                    8f:37:ef:39:a6:68:01:97:7e:d5:0a:33:de:f9:ce:
                    04:76:d3:68:e9:1a:0c:83:97:07:14:8e:27:74:78:
                    44:f2:c3:6e:49:41:49:be:89:29:c2:a8:f1:b4:fd:
                    86:74:69:1f:b4:4f:64:e5:65:50:66:ae:69:75:b5:
                    4a:53:62:d0:7b:e1:d3:6a:c5:8c:9f:5f:6a:1f:af:
                    12:c6:65:4d:05:a0:1a:64:36:0c:ec:2b:ba:68:69:
                    da:ec:15:b0:45:6d:fe:b1:44:52:31:49:16:88:17:
                    7c:e3:e1:cb:63:dd:20:27:f7:d4:92:c6:58:a5:95:
                    0f:38:d5:14:21:94:a0:d2:e9:b8:1b:a8:41:1d:6d:
                    ce:e8:ce:83:cd:11:93:e4:54:a9:ca:7e:8f:3e:2d:
                    b7:cf:9e:85:1f:8e:2b:e0:e0:63:5f:1c:25:bf:13:
                    d0:7d:93:79:0e:5e:1b:73:ab:93:fa:cf:1e:99:3f:
                    0b:7e:77:bf:c0:f6:77:1f:22:4d:26:e1:c5:51:0e:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45472
                  56079
                  139663-139664

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.196.0/22
                  115.31.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:87:c0:8c:8a:0a:f1:e0:97:42:60:66:10:56:ee:2e:cc:63:
         e1:0b:65:fd:c7:07:30:83:f4:8b:39:34:c9:cd:73:52:a8:97:
         0d:54:e0:92:ab:04:b3:c6:48:c0:1e:ac:df:f2:d1:ae:12:be:
         b7:b0:a6:7a:07:3d:16:96:46:61:6e:4a:0c:1f:86:a0:22:ec:
         e8:ad:c2:db:00:6e:d1:9d:ae:a7:c0:4e:0e:9d:73:5e:48:4d:
         85:c7:67:c3:94:77:5e:c8:b4:1c:e5:ce:78:e0:82:8f:92:e8:
         62:05:e7:c2:86:14:6e:92:7d:b9:12:5a:3c:79:7a:14:5a:80:
         b6:3d:f6:54:73:5d:bb:49:18:fa:cb:c7:db:2f:7e:93:05:be:
         9a:9f:d3:cf:15:d9:2a:4d:1a:91:05:1d:b5:17:6e:ee:45:37:
         62:39:d9:a7:e6:3a:2a:65:16:08:a3:51:64:74:b1:07:44:d6:
         99:d2:e8:9a:5b:83:26:01:4b:9b:e8:0a:ed:9f:51:68:c4:a2:
         4f:9f:38:10:2c:04:41:17:a5:0d:84:7c:12:9d:94:08:c4:6b:
         18:7f:fc:da:78:df:4d:3b:90:a8:8b:bb:55:93:d0:0d:60:cb:
         b1:67:12:c5:2f:85:ca:a3:6d:0e:0b:fe:30:ba:5d:66:70:a6:
         cc:09:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:45 2026 by rpki-client