Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
File:                     eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer (raw, json)
Hash identifier:          GcHBRN1dJk3HgEkrd3eZvKdjj93JFWNWUwDwZ9ED+zA=
Subject key identifier:   79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CB69
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 14:43:26 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 139305
                          IP: 103.141.14.0/23
                          IP: 2001:df0:e480::/47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183145 (0x2cb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 14:43:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:c1:7b:9f:d0:ac:c9:bc:8c:c5:6a:c1:72:
                    41:f9:9f:3b:39:bc:6d:d2:89:8e:2b:eb:72:8b:6d:
                    25:ed:3b:32:dd:62:cc:e0:1c:6d:1f:1f:bb:2e:67:
                    bb:58:d5:ec:96:1f:8a:b4:f0:bb:b5:8f:9c:d9:72:
                    f6:4d:f5:23:ed:da:78:e9:7e:e6:49:12:6d:39:1e:
                    61:65:84:14:a3:ad:2c:f7:e1:aa:1d:e4:ac:27:5b:
                    30:ba:69:f1:5d:28:40:60:ec:06:c7:21:cc:26:c6:
                    2a:c8:a2:c9:98:64:50:47:e4:23:c5:8c:52:d0:45:
                    a1:20:42:45:86:be:b9:dd:85:8d:97:e0:86:15:88:
                    a3:dc:76:47:e1:ef:31:84:50:ff:6f:bd:2b:36:78:
                    53:6e:ca:d3:dd:d2:b4:b7:ee:ad:ff:65:66:e9:f7:
                    bc:1c:66:67:82:9e:28:7e:a1:ca:60:2d:15:83:bd:
                    24:70:bc:45:37:96:98:eb:22:d3:0f:ff:10:06:75:
                    a5:c2:b7:f3:76:f4:0f:85:2b:e8:8b:6d:c9:6f:3c:
                    02:0d:d9:78:5d:d1:7f:7a:50:5c:df:2c:91:14:25:
                    10:d2:84:2d:3e:b3:37:63:07:40:69:e9:aa:83:23:
                    3b:71:1a:a5:40:f6:34:a2:73:79:d7:b6:61:de:0a:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139305

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.14.0/23
                IPv6:
                  2001:df0:e480::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:97:0b:57:d7:51:50:47:69:ad:5a:eb:a9:22:bb:7c:c6:
         70:1f:86:d5:c7:f4:2f:bf:82:d9:43:72:81:4d:a5:cf:6a:1f:
         8a:cc:c0:46:21:06:f1:32:91:8f:5f:1e:c5:59:dc:ed:4f:5d:
         84:64:55:7f:9b:1a:d9:72:f2:c2:af:6d:10:01:99:1c:ed:87:
         15:50:be:68:d0:35:c0:16:21:58:ca:b0:cb:6e:82:77:57:8e:
         fd:09:80:cd:1e:24:a9:0a:84:24:aa:a1:b0:1b:39:3b:a1:d7:
         e7:b8:10:cf:6c:97:16:7d:5c:42:28:8b:4b:9e:de:33:8f:30:
         8b:24:b6:15:c0:0e:c3:2f:fa:ad:a2:6f:2d:f1:da:10:d2:ca:
         61:f6:b2:9a:4d:25:cb:64:18:29:92:1b:4c:71:38:71:5f:8a:
         c0:2c:a5:43:5a:4b:9e:b2:88:f3:7b:4f:08:8f:9c:6a:10:ea:
         c1:a8:b7:88:ec:ba:76:b5:8c:af:3b:ea:6e:bf:c6:94:47:8d:
         ca:da:9e:78:58:86:e0:3d:8b:31:01:d2:22:b7:8e:59:09:50:
         48:a0:57:88:a1:da:2a:b7:50:bf:1f:da:99:54:60:36:2e:f5:
         aa:01:b2:ce:12:3e:33:43:d4:92:f0:97:0a:c5:d5:4d:f9:32:
         69:65:59:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:10:24 2026 by rpki-client