Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.cer (raw, json)
Hash identifier:          fWzDYISBjMxsZb95qeRAhiwzoLipcwmSr58gtsDfpEc=
Subject key identifier:   9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C0E5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:38:17 +0000
Certificate not after:    Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 135339
                          AS: 152177
                          IP: 103.214.156.0/22
                          IP: 144.48.112.0/22
                          IP: 2407:ea40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 15:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180453 (0x2c0e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 30 14:38:17 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:78:e5:88:0d:e4:54:82:fb:be:6a:04:e0:
                    69:c7:f5:61:69:33:cf:18:d6:72:2a:d5:08:8f:35:
                    b5:c0:45:e9:cd:4d:77:b7:9f:2b:a3:54:b1:d2:b4:
                    3c:93:2b:e2:62:2a:cd:64:d3:b8:ef:ef:9b:8e:c0:
                    86:79:60:06:ec:35:89:11:43:ac:9f:75:5d:b3:de:
                    e0:cd:cf:fd:c5:19:94:5a:9c:28:2d:43:2d:8c:e2:
                    05:47:27:13:91:e8:c2:ff:1b:bb:ed:37:ad:bf:42:
                    16:43:1b:61:4b:03:34:cd:84:3f:50:0b:03:f4:b5:
                    e1:58:91:10:e2:6d:4d:3f:96:63:ef:40:fd:6d:c5:
                    fa:51:96:48:94:a9:03:b2:a2:2c:2e:bd:19:97:25:
                    80:11:8e:29:49:64:09:c8:06:ed:92:3a:f3:b6:b2:
                    2d:8c:2a:31:99:45:27:9b:b2:93:dd:38:9b:2e:0e:
                    48:9a:64:ff:d2:2b:53:ab:c0:8a:96:9d:3c:01:7e:
                    7c:2c:0b:58:96:08:ce:3a:76:20:26:16:b6:54:4c:
                    8c:25:b3:8a:bf:b6:30:07:99:23:3b:4d:e5:c3:1d:
                    8f:9a:fe:49:bf:62:48:50:ce:d6:9a:18:34:57:17:
                    8f:03:19:4f:1a:03:bd:2f:77:00:31:91:18:05:cf:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135339
                  152177

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.156.0/22
                  144.48.112.0/22
                IPv6:
                  2407:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:d5:9f:2c:c0:cd:ab:f8:e6:5f:cc:3c:ac:07:32:53:4a:
         02:98:8f:c2:53:7d:6c:e1:c6:6c:bd:06:db:8a:0a:b8:4f:e6:
         0e:95:26:48:d2:12:e1:ba:20:40:d6:ef:bd:0e:01:8f:b5:6f:
         ee:79:59:c2:0a:00:5c:15:85:0e:fb:d2:2d:ee:9b:ab:00:b9:
         25:f4:0a:0f:47:3b:bf:af:20:f1:ad:85:80:0d:52:e7:61:7c:
         76:a5:f1:97:41:dd:f1:85:ab:7c:b9:35:c9:10:61:bf:b1:52:
         c4:fd:6c:e1:5f:c5:89:df:82:59:e0:1a:c2:2d:52:13:91:98:
         17:c0:ec:6c:12:d9:95:8b:85:09:9b:2f:11:72:66:2a:d0:11:
         59:55:4b:85:01:f9:e9:b6:ce:39:d3:26:aa:30:a0:c3:47:2c:
         c5:07:5c:22:cf:93:27:e9:99:1b:2c:e4:48:bf:81:de:94:53:
         00:85:db:71:f7:6d:53:ae:88:69:ac:be:bd:75:f7:3e:d6:69:
         ba:b7:a9:94:1d:f4:ae:a3:66:68:26:c2:53:78:03:13:5f:9a:
         39:78:79:f4:81:a9:97:7e:14:d2:88:00:7f:d4:27:a9:c8:d0:
         56:45:be:16:3d:ed:b4:c2:84:e5:2d:5d:64:36:8a:71:d3:e0:
         77:e2:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:16 2026 by rpki-client