Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
File:                     v54NeIhwkRvVdMDs1KBcKQoJtf8.cer (raw, json)
Hash identifier:          BNlDz6hEcQxUJLwlBfZ1nPOF/n9lZOqbUqE9oc8ciqg=
Subject key identifier:   BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D9C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 30 Sep 2026 14:21:44 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 136799
                          IP: 103.35.112.0/24
                          IP: 103.116.171.0/24
                          IP: 103.117.104.0/23
                          IP: 103.227.234.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 05:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186823 (0x2d9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 30 14:21:44 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:f3:0e:4f:a0:03:92:f6:f3:39:0c:f7:fb:
                    19:c9:65:0f:fe:36:b5:46:a3:01:48:d3:05:c7:b6:
                    35:5e:b3:e1:9e:55:42:4f:03:dc:aa:51:34:0d:f7:
                    b5:b6:51:4d:78:2b:54:8e:d4:99:e3:e3:f3:0d:46:
                    9f:f1:68:fc:ed:96:7e:24:54:7d:00:d1:69:ad:8e:
                    21:1f:40:05:4d:1e:e2:21:1d:39:c1:41:26:6e:0f:
                    9a:6f:ef:16:07:bc:40:6f:b1:a9:a3:39:45:8c:b1:
                    fa:b7:91:82:88:66:10:6c:b1:e9:92:b9:bd:be:a1:
                    22:55:fa:eb:58:76:c6:df:62:a0:4c:9d:03:c1:d0:
                    26:59:9b:46:6f:56:e4:c0:f1:fd:aa:a7:89:91:10:
                    b9:94:08:f2:2b:ab:6a:51:68:e5:e6:f6:c2:f9:84:
                    35:5c:a0:81:fe:e1:b0:fc:6e:3e:d7:5c:16:79:a1:
                    49:0e:a2:2b:58:bd:a6:de:3b:83:f5:6b:16:64:1f:
                    8d:bb:0f:cc:24:d3:df:ad:df:96:f9:ea:e3:30:53:
                    8f:6a:d1:35:3d:a4:41:6a:0f:cd:10:1c:20:9e:42:
                    b0:95:df:73:75:76:a8:d2:3a:56:39:ab:73:5a:05:
                    cf:16:c6:f9:97:ac:b8:56:1d:d9:28:3e:8c:f4:f6:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136799

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.112.0/24
                  103.116.171.0/24
                  103.117.104.0/23
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:58:1a:46:1c:8f:99:46:21:20:13:6c:df:20:47:1c:70:
         c1:49:be:28:be:f8:70:e2:d4:16:78:c4:b8:df:54:5a:c4:a5:
         06:3f:6e:1c:ad:0c:d1:6d:43:37:78:f7:f1:1b:8f:20:8f:a6:
         fe:e2:c2:c6:9e:cf:c3:5f:60:b3:d7:f7:89:3c:5d:f8:1d:96:
         46:22:f5:15:21:08:37:63:94:4f:4f:00:92:cb:d8:62:d1:60:
         cb:f8:bb:3c:6f:b1:a3:a6:74:60:03:ea:f0:0f:cc:35:a2:6f:
         82:0a:f9:69:90:2a:74:50:42:ae:53:16:24:46:d8:1b:41:04:
         c6:02:f3:e8:9b:2d:4c:0d:95:d8:49:d9:6a:56:8f:df:18:86:
         5f:87:5e:3a:58:52:cc:92:7d:b4:1a:68:c5:e7:3b:77:fc:82:
         91:82:0c:a4:8f:68:32:0e:59:90:7f:19:53:59:d2:ed:59:6a:
         13:62:3c:42:19:37:2e:5e:06:82:8b:0c:c1:44:1c:59:96:a4:
         73:bb:12:aa:dd:d1:ce:34:e1:3f:2f:74:f8:3e:fc:75:50:79:
         73:75:33:05:19:3e:7d:b6:94:c4:b6:0e:a6:ff:29:02:f6:3a:
         b1:35:8d:10:73:57:7d:c7:7f:8e:03:c1:ac:49:29:a5:b0:b1:
         6a:67:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:17:18 2026 by rpki-client