Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.cer (raw, json)
Hash identifier:          NfoJmwzqdxUexlgHwkWLpZQUuPfN4wzkVuosqr+ukBQ=
Subject key identifier:   9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CBBC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 06 Aug 2026 19:46:28 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 135339
                          AS: 152177
                          IP: 103.214.156.0/22
                          IP: 144.48.112.0/22
                          IP: 2407:ea40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183228 (0x2cbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  6 19:46:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:78:e5:88:0d:e4:54:82:fb:be:6a:04:e0:
                    69:c7:f5:61:69:33:cf:18:d6:72:2a:d5:08:8f:35:
                    b5:c0:45:e9:cd:4d:77:b7:9f:2b:a3:54:b1:d2:b4:
                    3c:93:2b:e2:62:2a:cd:64:d3:b8:ef:ef:9b:8e:c0:
                    86:79:60:06:ec:35:89:11:43:ac:9f:75:5d:b3:de:
                    e0:cd:cf:fd:c5:19:94:5a:9c:28:2d:43:2d:8c:e2:
                    05:47:27:13:91:e8:c2:ff:1b:bb:ed:37:ad:bf:42:
                    16:43:1b:61:4b:03:34:cd:84:3f:50:0b:03:f4:b5:
                    e1:58:91:10:e2:6d:4d:3f:96:63:ef:40:fd:6d:c5:
                    fa:51:96:48:94:a9:03:b2:a2:2c:2e:bd:19:97:25:
                    80:11:8e:29:49:64:09:c8:06:ed:92:3a:f3:b6:b2:
                    2d:8c:2a:31:99:45:27:9b:b2:93:dd:38:9b:2e:0e:
                    48:9a:64:ff:d2:2b:53:ab:c0:8a:96:9d:3c:01:7e:
                    7c:2c:0b:58:96:08:ce:3a:76:20:26:16:b6:54:4c:
                    8c:25:b3:8a:bf:b6:30:07:99:23:3b:4d:e5:c3:1d:
                    8f:9a:fe:49:bf:62:48:50:ce:d6:9a:18:34:57:17:
                    8f:03:19:4f:1a:03:bd:2f:77:00:31:91:18:05:cf:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135339
                  152177

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.156.0/22
                  144.48.112.0/22
                IPv6:
                  2407:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:c6:79:89:71:46:9f:c1:be:36:9a:09:51:b0:18:72:74:
         0f:f5:e7:d5:4a:9f:5e:87:21:c8:e9:12:77:3d:a7:8d:72:d8:
         e6:cb:40:a2:ab:6c:18:92:19:f4:b2:59:79:14:8f:71:43:16:
         53:46:31:c3:1c:e6:0a:99:c4:4b:b1:e2:d5:b5:f2:a6:db:57:
         f0:5a:87:cf:3f:01:c2:87:73:1c:59:ea:3c:83:58:38:90:12:
         b8:65:72:05:a3:0a:3c:c5:71:3a:c7:4c:08:be:52:7c:e8:99:
         46:7e:5b:fb:1c:f8:4f:a9:d7:92:f4:2a:e6:47:c5:51:69:22:
         ae:eb:c1:d8:d8:0b:14:0e:77:09:76:be:08:2b:af:b0:c8:54:
         1e:95:66:7e:31:b3:99:34:40:89:3f:18:68:25:d0:22:32:89:
         38:d1:7b:12:a4:1a:da:27:cb:7e:fc:c9:cf:bb:9d:de:52:ef:
         43:2c:ae:80:1e:e8:f1:55:66:45:47:0a:54:c8:81:b7:3e:74:
         99:f3:b1:98:43:ee:a1:e4:eb:a6:3d:29:d7:33:92:f9:03:d3:
         5d:76:d1:1d:94:97:d2:c7:50:5c:20:be:d5:e0:ee:a3:d6:33:
         20:40:77:95:2e:68:8e:61:08:a7:cb:97:9a:5c:76:7c:96:cc:
         97:d0:82:14
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIDAsu8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgwNjE5NDYyOFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzdCNjgxMTAvBgNVBAUTKDlCNUE1MzY1REEyQjI1RkE2OThCNzAz
MDkzQ0ZCREMyQTJDMjNGQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzIHjliA3kVIL7vmoE4GnH9WFpM88Y1nIq1QiPNbXARenNTXe3nyujVLHStDyT
K+JiKs1k07jv75uOwIZ5YAbsNYkRQ6yfdV2z3uDNz/3FGZRanCgtQy2M4gVHJxOR
6ML/G7vtN62/QhZDG2FLAzTNhD9QCwP0teFYkRDibU0/lmPvQP1txfpRlkiUqQOy
oiwuvRmXJYARjilJZAnIBu2SOvO2si2MKjGZRSebspPdOJsuDkiaZP/SK1OrwIqW
nTwBfnwsC1iWCM46diAmFrZUTIwls4q/tjAHmSM7TeXDHY+a/km/YkhQztaaGDRX
F48DGU8aA70vdwAxkRgFz2ORAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUm1pTZdor
Jfppi3Awk8+9wqLCP88wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDN0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tMXBUWmRv
ckpmcHBpM0F3azgtOXdxTENQODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhCrAgMCUnEwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJn1pwD
BAKQMHAwDQQCAAIwBwMFACQH6kAwDQYJKoZIhvcNAQELBQADggEBAG2BxnmJcUaf
wb42mglRsBhydA/159VKn16HIcjpEnc9p41y2ObLQKKrbBiSGfSyWXkUj3FDFlNG
McMc5gqZxEux4tW18qbbV/Bah88/AcKHcxxZ6jyDWDiQErhlcgWjCjzFcTrHTAi+
UnzomUZ+W/sc+E+p15L0KuZHxVFpIq7rwdjYCxQOdwl2vggrr7DIVB6VZn4xs5k0
QIk/GGgl0CIyiTjRexKkGtony378yc+7nd5S70MsroAe6PFVZkVHClTIgbc+dJnz
sZhD7qHk66Y9KdczkvkD01120R2Ul9LHUFwgvtXg7qPWMyBAd5UuaI5hCKfLl5pc
dnyWzJfQghQ=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:37 2026 by rpki-client