Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
File:                     eFqwsi3OWhJmUAwQZrT2sF91ysA.cer (raw, json)
Hash identifier:          PSsMO4z2+So3En8zMdQlnZgP1WjgSoWScM2tT1NF+Yk=
Subject key identifier:   78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A80D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Mar 2026 14:24:39 +0000
Certificate not after:    Sat 01 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 136260
                          IP: 103.85.134.0/24
                          IP: 103.141.29.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174093 (0x2a80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 31 14:24:39 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:fd:25:b8:09:e6:07:df:0b:f5:a7:4f:cc:
                    b1:c8:ee:db:b6:03:2a:e4:e4:86:20:af:fe:20:34:
                    5d:e8:08:b5:28:56:64:f9:9a:52:75:c8:cf:03:e2:
                    b6:d4:94:41:50:39:92:6b:67:47:aa:b0:f6:fc:7f:
                    de:cf:6d:5d:32:db:bf:72:e8:72:ee:02:f5:4d:bb:
                    94:9c:85:a6:f2:23:75:1f:06:b8:aa:3b:2d:d3:32:
                    04:5a:4c:7f:ba:e5:bd:b0:bd:9a:be:69:8e:09:93:
                    2e:de:62:30:19:18:f6:61:17:98:10:7e:9e:d3:a3:
                    7f:1c:d4:c7:7b:e3:c3:26:01:45:3c:88:d0:85:70:
                    53:a2:5c:f8:dd:3c:a2:5b:fe:fc:43:4b:86:af:d7:
                    12:ea:55:5a:08:53:50:6e:60:ac:7d:8a:39:7b:a5:
                    6c:91:dd:af:dd:3a:28:e4:b1:0e:24:f5:c0:03:6d:
                    c0:97:87:00:3a:7f:68:ec:48:03:69:87:9e:3d:8c:
                    f6:58:b0:0a:8e:1c:0e:1f:40:c5:3b:3e:b5:2b:f4:
                    2a:13:65:05:be:e7:f2:70:f2:d7:92:d6:7b:84:4e:
                    f0:aa:da:bc:41:06:0a:8b:45:6a:3d:e8:64:ca:86:
                    50:83:e8:cb:70:ff:c9:6d:25:32:83:79:2e:0e:01:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136260

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.134.0/24
                  103.141.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:36:0a:4c:f8:ef:f9:b1:e2:5b:a5:d1:55:0b:2d:87:c5:
         b4:78:24:6f:2e:a6:83:9c:6f:57:89:19:c7:51:af:27:48:30:
         3b:e8:9f:95:48:07:86:a8:c7:7c:c0:58:ed:7d:1a:9d:68:62:
         03:2f:da:cc:be:9b:0d:61:80:69:a0:15:05:27:35:5b:41:15:
         ac:32:b1:45:55:3c:db:f5:b4:c6:8c:8e:55:7a:1d:75:cf:b9:
         73:da:d6:af:37:b4:68:bd:06:ac:d6:a4:f6:43:d0:5b:22:91:
         fe:01:1c:0e:75:af:97:c9:03:87:bf:c6:ff:e9:63:5c:b4:49:
         a7:a2:2c:57:45:85:15:3b:3b:27:a5:57:35:29:39:ab:db:7b:
         05:c7:c0:6b:2a:50:fa:40:02:7a:67:09:b2:e9:7e:11:84:9a:
         da:c6:93:97:b9:2b:0b:9f:75:d8:ad:e4:e8:b0:98:5a:f5:4f:
         f2:69:ac:49:23:1b:da:ec:b1:50:e6:4c:6b:33:c4:85:9b:49:
         bc:47:f2:5f:3d:96:05:c9:2e:e6:a6:d7:ce:20:52:0d:96:0c:
         a8:a4:4e:f0:e0:92:6c:c0:c8:d9:44:50:2f:8c:e8:36:04:55:
         26:cc:97:3f:ea:1d:7c:de:55:a6:fd:ef:d1:02:46:bd:0f:9f:
         ef:69:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 07:09:34 2026 by rpki-client