Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer
File:                     flxEJXLUsPmrZIiClNR_qz972zQ.cer (raw, json)
Hash identifier:          2WDsTvBWgO+EZrA2HDg1eRgfTuZQZC7i1HCkRX/tMdQ=
Subject key identifier:   7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CE0D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Aug 2026 13:07:31 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 103.245.157.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183821 (0x2ce0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 18 13:07:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A916C243, serialNumber=7E5C442572D4B0F9AB64888294D47FAB3F7BDB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:67:a3:fe:3b:65:6f:4a:2c:fa:ac:f4:8a:
                    57:e0:f8:9d:9e:52:fe:f0:95:7d:2e:e4:ce:16:cc:
                    36:64:63:ea:72:3b:8d:94:32:97:7b:e1:db:aa:9a:
                    b1:0c:39:c7:12:9a:15:51:ee:a2:f8:ba:aa:89:65:
                    51:54:82:db:08:54:34:f7:73:22:71:27:f1:e7:fe:
                    d4:22:37:6c:f4:92:40:c0:fd:68:64:df:fc:46:6a:
                    de:eb:c3:63:6e:79:65:38:ff:12:29:da:3d:fc:fe:
                    0a:6a:be:89:ae:5d:50:3c:6a:0e:2d:f2:10:0d:cc:
                    3f:e2:fc:b7:f4:34:f0:73:8e:84:01:65:a0:15:82:
                    37:14:a4:2d:a4:2a:f6:33:c1:e4:da:99:d9:49:46:
                    42:92:e7:50:91:7f:72:a4:7f:11:31:d3:1d:39:eb:
                    e4:6d:a7:e1:58:06:a2:09:cc:da:59:46:39:b2:21:
                    89:02:92:23:4e:a1:1e:b1:7e:10:e7:a3:68:03:e8:
                    c5:7c:cb:63:3e:e0:9f:81:34:8c:3c:62:ca:76:73:
                    ef:b2:53:45:49:81:66:94:76:f1:06:ad:79:70:69:
                    02:20:0c:c2:01:73:88:8d:09:96:b1:4f:2b:a3:1c:
                    76:0f:5d:50:92:0a:2b:43:16:89:09:e7:87:08:15:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2e:6a:b6:ac:ca:49:c6:eb:77:f0:8f:72:a2:55:e8:b1:5f:
         92:43:49:49:32:d9:cc:9c:42:18:af:31:9d:1d:14:7c:3e:2c:
         51:7e:f6:4d:35:ce:0f:72:71:83:1a:58:15:b3:c7:2d:f1:ed:
         a6:a8:a8:bf:98:5e:db:ea:d2:cb:3a:5d:13:6b:b5:f7:fe:e6:
         c7:07:fa:32:a7:51:a5:56:2a:91:b8:6f:8f:c3:42:92:43:a4:
         61:b5:2e:39:98:25:27:c4:22:f5:0c:21:ef:45:6d:68:3a:95:
         0e:8a:c8:e3:d8:28:d9:59:bc:0c:57:fb:89:d4:fd:ff:07:d2:
         32:df:10:17:06:94:40:d1:d1:60:23:60:2c:5b:bd:9e:3b:0a:
         a5:d9:2a:0b:e2:83:7f:b8:8f:6a:03:80:7a:1c:bb:37:c3:7b:
         8d:51:77:9b:d6:e0:d8:9d:3c:f9:dc:ac:34:3e:c9:bb:59:68:
         d7:02:bf:a5:9b:5f:c2:2b:ff:2b:cb:a9:7f:fb:e3:22:3f:5b:
         5a:7c:15:6e:f9:33:ab:68:11:85:97:de:49:75:51:bc:e3:8f:
         92:49:85:13:40:59:02:fc:ce:9f:a6:2e:ba:dd:41:e6:93:30:
         70:3a:b2:de:8a:33:3f:4a:aa:6c:a0:c9:cd:32:ed:a0:76:2e:
         86:d3:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:37:55 2026 by rpki-client