Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
File:                     v1WlsAYqTmo9yHnjyfyyZnxokrc.cer (raw, json)
Hash identifier:          sBOP7CadC/iWt+FNYdPw+B8sy9s/APTQWEB8JBvn1+o=
Subject key identifier:   BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02DF18
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point:   rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 19 Oct 2026 12:51:23 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 138209
                          IP: 103.129.224.0/22
                          IP: 2403:8ac0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188184 (0x2df18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 19 12:51:23 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:32:52:48:e1:af:6b:ac:f6:65:07:a9:4a:
                    ff:11:a6:57:3a:db:24:84:06:93:b9:76:d9:35:a0:
                    cc:6c:8b:90:33:15:0c:cb:1b:38:bf:aa:f9:e3:ef:
                    66:b7:10:df:c5:28:37:bc:97:8c:9e:95:c8:87:fa:
                    43:37:10:2b:b7:10:41:fc:2a:82:10:bb:4b:b7:c7:
                    b8:56:06:52:1c:e2:24:db:2f:28:09:08:eb:2a:c3:
                    2c:df:6f:41:44:8f:24:26:03:f2:53:47:df:65:b9:
                    59:9b:dc:61:1b:cc:dd:6e:f8:0e:52:85:86:51:4c:
                    74:26:26:0a:21:a4:2e:dc:3e:8c:91:55:19:78:3d:
                    6a:c6:eb:1f:71:fd:54:61:24:da:b9:da:08:e1:2b:
                    9f:9d:c9:ac:48:7e:c3:ae:d2:a7:e8:ea:16:63:73:
                    82:20:36:07:5a:88:96:74:69:dd:07:80:aa:af:58:
                    c4:8b:e3:49:19:31:48:88:e2:65:65:39:0e:bb:c3:
                    84:28:77:86:89:a9:ec:90:9a:c3:0d:45:28:19:dc:
                    8f:02:01:83:c1:e8:50:e7:20:6c:4b:0a:f7:f6:58:
                    86:71:da:9c:8d:73:a7:a5:44:9e:ea:56:5e:47:10:
                    03:4f:b2:74:60:74:53:be:60:3e:b4:ac:5c:07:06:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138209

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.224.0/22
                IPv6:
                  2403:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:96:83:a6:6e:f5:51:fb:a5:e9:16:b4:cd:21:fa:ec:7b:62:
         b4:0f:67:89:58:82:dc:3d:c3:6d:a1:92:08:83:07:9e:5b:54:
         34:bb:a2:45:50:36:87:28:4e:84:c1:17:e3:b2:71:a8:49:69:
         fc:6e:37:d5:c6:a6:a4:0b:bd:93:16:b7:bd:7c:9f:69:4d:a9:
         11:71:af:3d:53:36:6c:79:5a:f9:71:2d:21:b7:06:59:3c:6c:
         6b:ff:f0:79:65:b6:11:9a:41:09:9f:02:bd:59:a8:7e:d7:1a:
         8e:76:8b:b6:91:c6:6d:9b:f9:4f:42:59:b5:64:88:d6:f6:3b:
         6e:59:62:94:5d:90:2e:ea:a7:d6:d7:f2:c9:cf:88:c4:02:30:
         15:fb:43:e6:1c:84:83:17:96:50:63:e5:aa:52:19:dc:8e:bc:
         6a:3e:4d:6f:6a:00:11:86:7a:65:6d:4e:b6:5c:8e:88:e1:0b:
         67:bf:2c:9b:45:ed:12:c9:bb:54:9f:43:f2:61:1f:41:a0:ca:
         8d:28:bd:27:55:34:e7:01:79:f4:f2:d8:86:71:37:7d:0f:be:
         ba:64:e9:ab:fd:82:d1:b9:88:27:bb:40:47:c3:ce:91:3c:15:
         94:75:10:bf:0a:e4:d6:47:91:2d:7a:e6:89:46:71:db:37:e4:
         0c:0e:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:53:54 2026 by rpki-client