Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
File:                     u5MlbmB9QutuNCDcxxN_ILhNDIo.cer (raw, json)
Hash identifier:          hdraljP1FpBro60nhrEQmxgrvQ+yHxopgiz8TPB3WnM=
Subject key identifier:   BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C884
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Jul 2026 15:01:58 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 132018
                          AS: 136726
                          IP: 103.21.192.0/24
                          IP: 103.94.184.0/24
                          IP: 2001:df1:7f00::/47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182404 (0x2c884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 29 15:01:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:3b:37:ed:02:49:1c:4b:90:d4:f8:eb:2f:
                    c1:36:f2:b6:8f:43:23:12:c7:dc:7e:56:10:7e:55:
                    ef:28:82:f4:ae:7a:89:03:e6:61:fa:24:80:6b:7d:
                    cb:34:56:a8:18:7c:36:75:8e:e4:4a:45:71:11:6d:
                    1f:07:40:f8:3b:d3:3d:84:a2:8c:e6:bc:45:cd:0a:
                    ad:4e:88:2f:8c:bd:fb:db:87:69:99:19:fe:2e:46:
                    74:f8:39:68:b5:8b:fa:27:57:5f:54:05:47:52:9d:
                    19:c5:21:ef:c4:8f:9b:e6:be:14:97:46:94:c9:1e:
                    2d:6a:96:25:cb:0f:50:9e:4a:ca:1a:c9:0e:70:84:
                    c1:34:10:96:48:c2:5d:c4:e4:13:72:58:88:46:84:
                    de:d1:e7:5e:6d:cc:c1:9b:0b:d4:c3:f5:87:e5:40:
                    f3:db:80:58:7c:ec:fd:02:65:78:0c:a4:2b:b9:05:
                    50:8f:20:46:41:9c:30:d9:9e:46:36:e5:6b:f3:ac:
                    89:c5:49:1e:ec:9a:f3:aa:66:c9:e7:68:82:c9:96:
                    68:aa:00:85:22:d6:89:c5:5a:fc:8f:10:67:ad:4d:
                    6c:6d:64:2f:df:48:4f:b7:bf:a1:1a:30:ef:0b:82:
                    21:b8:e3:1d:29:6d:9b:17:22:2d:de:04:d4:c8:fb:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132018
                  136726

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.192.0/24
                  103.94.184.0/24
                IPv6:
                  2001:df1:7f00::/47

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:49:31:11:90:ce:84:57:7e:22:41:c1:fe:53:f9:22:c9:
         29:ac:f3:40:3f:d8:d3:0d:a3:1f:9a:93:e0:89:7e:48:25:c5:
         be:15:14:ff:44:76:97:6d:27:fe:e6:b3:5a:65:c8:80:e4:65:
         16:d6:ea:7f:ce:b3:cf:6a:67:98:f3:56:f4:15:04:9c:9c:ab:
         9f:1a:f4:41:d7:75:88:68:fc:a7:df:3d:3f:32:1b:0f:6f:9e:
         53:62:d3:1e:e9:fd:e8:ee:8a:49:61:40:6b:ee:47:b0:96:28:
         04:d0:27:33:03:c1:24:4a:53:9c:de:66:96:97:94:5f:1d:fe:
         9b:79:24:eb:f1:57:24:71:e2:d6:22:61:d2:53:8f:96:d4:1b:
         fb:47:06:5f:eb:64:42:f5:8c:7c:3b:1a:29:ff:09:bd:06:da:
         25:1f:69:53:7c:67:07:75:43:e4:a6:0e:dd:07:61:f0:d5:75:
         44:cf:0f:9e:84:9b:6e:34:9a:13:fb:df:42:21:df:34:45:13:
         af:26:ee:ca:53:53:4a:57:2c:29:ca:38:8a:47:b2:fc:91:8f:
         20:db:6f:95:08:47:a6:67:03:91:d7:6e:59:ce:74:db:9e:f4:
         07:45:15:81:9a:de:d3:27:58:40:50:13:95:53:cf:09:a6:b3:
         ca:a6:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:49:08 2026 by rpki-client