Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.cer (raw, json)
Hash identifier:          5pwWNqwY2XVvmjE56K9hFsUe9CkJBXkOuwqi7KutPs8=
Subject key identifier:   8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CC99
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 11 Aug 2026 13:11:44 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 135010
                          AS: 137969
                          AS: 141768
                          AS: 149628
                          IP: 39.109.66.0 -- 39.109.91.255
                          IP: 103.82.216.0/22
                          IP: 103.98.14.0/23
                          IP: 103.119.132.0/23
                          IP: 2403:e840::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183449 (0x2cc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 11 13:11:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:cf:17:3a:b0:4f:bd:6c:b2:b7:fb:25:c7:
                    6a:05:4d:db:41:8b:e4:74:ca:f1:94:e1:e3:73:de:
                    28:f2:b4:0c:ed:59:23:3b:21:63:78:74:95:92:35:
                    cc:4f:18:25:2c:cf:7c:4f:1f:35:fe:49:0a:5f:de:
                    b5:39:92:31:f3:35:69:81:1e:8a:8b:7f:03:74:dd:
                    e3:49:27:af:cb:7e:3a:fb:84:9a:65:b3:b7:53:63:
                    cc:c0:28:b9:56:d5:93:47:99:c8:c2:3d:91:e2:e4:
                    7d:db:06:c0:c7:0c:ce:43:e7:89:df:a3:42:59:7a:
                    ad:eb:a8:7f:fe:f3:c6:0b:bc:26:5e:c7:51:57:98:
                    f7:55:0b:0b:31:6b:dd:91:c8:90:9e:38:8c:b5:39:
                    5e:de:cc:c2:b4:de:76:57:83:b6:2c:54:8d:65:9f:
                    b6:6a:28:4e:7a:a8:2a:97:02:bb:c5:4c:b8:59:09:
                    11:69:7b:2c:91:fe:08:bd:45:5f:6a:be:56:7d:32:
                    d3:2e:69:10:5c:bc:e4:46:f1:f3:75:79:54:cf:58:
                    57:65:b1:ca:61:c5:25:60:35:4c:eb:ae:70:43:f4:
                    2f:a9:cd:5b:9c:63:82:8a:88:51:38:ea:23:28:1d:
                    09:33:71:14:22:91:3b:9f:92:3a:99:38:cc:44:5f:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135010
                  137969
                  141768
                  149628

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0-39.109.91.255
                  103.82.216.0/22
                  103.98.14.0/23
                  103.119.132.0/23
                IPv6:
                  2403:e840::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:54:19:0a:63:45:ea:b7:b8:ae:f1:ba:21:47:8b:09:79:d8:
         90:aa:70:75:3b:78:be:ef:d5:98:46:71:5a:d5:3c:bd:63:18:
         3f:cc:92:c5:38:3f:99:94:da:34:e4:7a:fa:7c:02:11:66:2e:
         62:1f:d4:7d:3f:a2:b8:62:cc:a9:f9:bd:02:74:04:d3:d1:9e:
         1a:40:56:6f:38:d7:bc:54:3a:ed:f3:7d:a4:df:a9:c0:dd:09:
         0f:6e:a6:42:b8:ed:dc:10:85:53:38:c0:2e:a7:6a:d6:34:1e:
         f8:6b:97:ba:f5:fa:cd:8e:bb:8a:af:50:bd:ba:41:3f:d9:30:
         ef:80:b4:7a:56:ce:e5:ee:cc:99:12:1f:88:bf:38:b0:3a:8c:
         28:d0:8e:2d:c1:7a:24:db:2f:d3:c4:2a:06:a9:ae:b2:3f:22:
         2e:14:26:9b:a6:10:3f:72:04:fa:53:63:14:b5:59:0e:9b:14:
         db:1f:d2:32:a8:19:f0:5d:bc:e4:11:7c:42:23:f7:ab:02:82:
         c0:fa:f1:ed:70:ca:2b:d0:2d:95:b4:72:dc:e7:34:05:47:98:
         09:94:91:7e:c7:53:c1:5d:c2:20:9e:53:33:ec:e8:e1:b8:66:
         b4:7b:2f:4e:00:7b:ce:48:18:11:1a:0f:25:de:03:f6:a1:a5:
         37:2c:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:21:48 2026 by rpki-client