Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
File:                     eB0SmZv3o5TzJwDiDfeT0pnue5s.cer (raw, json)
Hash identifier:          nqwFKTWXZATdSiV1elOddpK7tmtfnIGNlDcLoFfCYmo=
Subject key identifier:   78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CCC3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Aug 2026 11:34:02 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 140932
                          IP: 103.131.162.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 10:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183491 (0x2ccc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 12 11:34:02 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A917888C, serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:9b:f8:b2:f3:aa:47:f8:04:66:47:da:86:
                    c9:d6:86:4d:55:a5:2e:3f:39:98:1c:11:e7:6a:21:
                    cf:8a:fa:18:bb:3c:6d:e3:8c:cd:a3:26:3a:35:af:
                    8a:45:b6:bc:4b:91:46:79:1e:de:f3:12:75:2d:ea:
                    dc:a4:fb:e8:37:e4:e3:c5:38:a7:1d:90:04:dd:fb:
                    eb:b7:66:c2:39:cb:5f:52:29:e3:95:46:7f:f2:b7:
                    34:07:e4:31:2f:fe:2e:b3:f9:3a:05:b0:5d:ed:29:
                    60:e6:ba:fb:63:dd:92:5d:fc:77:3e:7e:1b:fd:1e:
                    65:f4:c7:6b:c7:e2:dc:39:d4:4b:db:da:14:8c:c2:
                    1c:bd:f7:16:d6:53:15:73:8b:43:e1:9c:f1:c9:ee:
                    f0:2b:9e:6f:31:a7:86:e1:14:e1:70:1c:41:24:da:
                    12:78:0d:58:55:e3:a1:2c:e2:0f:8d:a3:7a:d7:b5:
                    aa:2c:18:a5:d1:ad:8b:a6:54:a5:b3:00:fe:7f:92:
                    38:af:e1:f4:12:9e:73:6b:a8:b7:5a:ef:03:fc:37:
                    45:67:e9:e2:36:8d:84:c2:be:9e:72:55:3f:7b:02:
                    66:11:8f:95:17:f0:30:0c:63:20:e8:1f:5b:58:7f:
                    f9:7a:c4:70:42:05:9f:3c:3d:07:7f:76:2b:18:27:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140932

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:df:ac:22:db:a1:e5:87:d1:90:0c:4d:47:89:1d:a0:19:e7:
         d5:93:49:48:c7:45:d8:01:39:a7:e7:38:7b:5b:d1:23:15:72:
         ca:f4:b4:2e:e5:af:1d:df:f0:90:ff:1e:4b:f3:45:dd:30:d2:
         e0:fd:8e:64:fa:fa:0c:d7:02:cc:96:ff:7f:cc:ae:79:ec:8a:
         f3:42:6d:59:5c:c4:bf:97:e3:d0:93:6f:e4:a7:6b:c5:3c:90:
         ac:46:47:e4:a5:fb:ad:da:69:56:9b:ac:7f:74:a0:1e:9e:32:
         eb:eb:9e:80:11:33:1b:f2:74:4a:57:0c:48:19:44:8a:e1:cc:
         79:25:2c:eb:01:1a:07:69:3c:74:ce:d7:d4:95:af:f2:78:c9:
         2d:f7:d9:8b:5a:c0:2a:b9:7e:cd:b3:1b:ec:e5:f4:ff:0a:57:
         fe:a2:4d:49:e5:da:a7:26:af:ee:39:c1:bb:76:51:5f:f4:dc:
         31:9f:af:d4:7d:7f:50:e9:52:70:82:cf:df:64:5a:e0:9b:94:
         81:90:14:29:84:d5:6c:22:75:f8:98:b3:b8:6e:fa:73:36:fe:
         ef:4d:cf:b0:ec:9e:4c:4f:30:93:a0:f9:ad:0b:f6:8a:7f:34:
         8d:30:4b:d5:fb:6a:82:ec:dc:19:51:ff:33:8c:98:a7:a4:2b:
         8e:29:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:06 2026 by rpki-client