Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer
File:                     fA03qVD2-mazVJllAshMr6_nOXE.cer (raw, json)
Hash identifier:          jAUohLg4WZaYE3FLGBqA6pif80YIqjL+h+1hyWDps6s=
Subject key identifier:   7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       026FF6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Oct 2025 00:30:13 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 153184
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 09:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159734 (0x26ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 29 00:30:13 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A918D6AD, serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:ad:82:82:d8:44:0d:4f:0b:12:55:b9:9e:
                    c0:57:8c:a0:ff:8e:07:4c:e5:f3:db:bf:9a:41:67:
                    9d:90:47:aa:0e:fb:26:0e:1f:69:f9:d8:3d:ad:34:
                    a7:ab:91:ad:a7:38:3f:85:42:02:e3:bf:4d:a5:3a:
                    30:24:e3:da:fb:0b:4a:36:85:72:b1:71:bb:e2:38:
                    39:f5:9e:6e:67:6b:9a:1d:89:84:1c:6a:83:55:79:
                    b1:b5:4c:4c:20:72:b3:25:68:a3:1f:d8:ae:20:f3:
                    07:0d:cb:ca:c1:08:36:2c:d8:fb:f4:a5:f2:e4:64:
                    f9:19:a1:de:8c:59:d5:1d:b6:e4:5f:74:ee:42:3f:
                    79:97:87:0d:93:2b:23:7f:59:0a:3c:bc:8d:c4:62:
                    52:27:fa:44:3d:a5:a8:e8:3b:1d:4e:4a:1d:45:63:
                    e4:3e:1c:d6:f1:d3:eb:d4:1e:30:3e:57:7b:3a:8e:
                    32:99:8c:43:93:63:ea:ac:e4:56:92:ab:5e:6c:da:
                    e7:86:be:d9:74:4f:32:4e:b3:53:7b:6a:ec:0c:97:
                    20:25:20:61:e7:ed:9e:a4:14:af:99:1d:e8:6b:c2:
                    53:64:c4:1b:8c:34:da:2b:01:4b:b7:92:48:34:e1:
                    c2:29:b3:30:28:47:56:f7:a6:9b:29:c8:0c:62:5c:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153184

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:9c:07:3f:ed:b2:bb:e4:90:e9:10:94:1d:d2:f9:fe:dc:
         43:95:66:a8:20:e1:de:34:d7:55:d6:fb:18:f4:e3:77:8a:6f:
         6b:a1:06:88:77:d6:f4:df:62:47:03:ca:54:fe:da:d7:30:1d:
         30:a5:a2:9c:9a:4b:ea:ff:64:ec:b1:0a:1e:71:76:b3:b7:c3:
         ca:b4:c8:bb:e9:ea:ae:69:a7:b6:fa:31:4c:a8:61:81:37:45:
         64:ae:bf:89:03:78:13:4a:94:ad:38:ed:fa:73:e6:bf:da:da:
         a1:f7:05:1f:ce:a7:9d:ab:52:7c:73:2d:e7:e0:21:bd:53:11:
         5e:40:9b:7b:26:d3:66:ca:4b:3a:a4:87:6d:21:0e:a9:d0:f5:
         ef:da:92:d8:0d:8b:37:96:84:20:82:20:dc:c3:62:9a:ab:dc:
         9a:cc:2a:80:82:f0:f4:86:a3:b3:cb:37:bd:92:21:bf:e0:43:
         69:75:97:f9:68:b4:04:e8:01:31:d1:a4:c4:76:c6:b6:63:37:
         82:63:1a:52:31:e1:83:33:9b:3f:ad:b5:7c:db:1f:e6:b1:e3:
         4a:7b:f2:a7:1c:3b:fb:3e:b0:26:77:e5:75:ea:bf:57:55:0a:
         c5:0f:a5:bd:06:d6:72:c6:c9:df:ff:e8:d4:56:3b:75:27:dd:
         0d:59:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:47 2025 by rpki-client