Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
File:                     -Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer (raw, json)
Hash identifier:          w8r6pob9v6o+jydMmHy2zguuh5A5OB/shCf7gd1lFm8=
Subject key identifier:   F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B692
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 23 May 2026 13:57:52 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 135420
                          IP: 45.249.184.0/22
                          IP: 103.218.188.0/22
                          IP: 2402:48c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177810 (0x2b692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 23 13:57:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:40:fc:9f:07:65:3c:88:af:21:f4:79:00:
                    2e:6f:02:d7:26:67:17:a1:d5:c3:6f:78:d5:54:34:
                    00:a6:4e:6a:60:c5:58:dc:47:07:22:37:84:67:64:
                    85:94:bd:8d:a9:5b:d0:21:91:95:f5:05:3d:ed:af:
                    6e:b4:ee:5e:77:d7:e1:5d:c8:26:4c:2c:5a:31:52:
                    56:8c:3e:5d:3e:60:a3:f3:91:e3:8b:d5:2f:c0:48:
                    66:f1:d8:51:de:2a:9b:03:c5:eb:32:4d:10:44:9b:
                    f9:8e:ed:23:78:c0:96:ce:ac:b8:58:8d:a5:6c:d5:
                    29:26:b6:96:8d:f0:e2:1a:6a:19:bf:e7:b9:62:7d:
                    cf:d9:aa:f9:f2:89:b1:8c:49:95:bc:08:f7:46:22:
                    e1:71:97:65:74:cc:fd:e8:fa:19:64:71:2f:60:8e:
                    27:7d:74:c0:1e:ad:77:d9:f0:73:97:08:d5:78:c3:
                    4f:a9:62:97:01:b5:cd:4d:77:85:ec:51:e4:a1:24:
                    7b:59:78:98:c8:7a:88:88:9b:11:8e:51:0d:bb:52:
                    ae:88:f2:b0:c8:81:27:2c:2d:06:fd:fa:6b:f2:f2:
                    76:af:40:f3:fd:cc:3a:ca:70:65:b2:47:6d:45:03:
                    ab:ce:10:7b:80:02:53:7a:d7:f5:8f:67:36:92:48:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135420

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.184.0/22
                  103.218.188.0/22
                IPv6:
                  2402:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:39:9e:28:c6:e7:97:9d:7a:10:2f:d7:99:cb:8a:b7:4a:6a:
         fd:a8:f6:aa:a6:e6:87:ee:2b:f8:df:84:e9:85:89:c5:1e:e5:
         53:fc:62:50:45:59:5f:20:f0:65:76:b2:b1:2f:96:89:ab:72:
         0b:7b:42:b2:9a:11:12:7a:34:d4:3b:b9:40:ba:4c:5c:4a:dc:
         9b:f9:28:fe:c8:54:1d:4c:36:85:c8:e2:94:63:af:01:c5:b4:
         9e:db:09:37:cb:93:55:66:81:41:5b:30:02:4e:e2:8b:cc:5b:
         3c:0c:f5:db:5b:92:11:eb:0d:73:7f:85:df:23:1e:7a:32:16:
         0e:26:cc:5b:78:aa:d5:a3:d7:b7:83:f5:ee:c6:ef:da:11:80:
         19:fb:58:b0:ae:fd:9d:d4:a4:9b:c4:f2:2d:2e:90:dc:ac:08:
         34:27:ce:47:d8:2d:af:6d:84:c5:25:bd:b3:e4:c6:67:98:be:
         1f:2c:2b:a2:64:bf:e3:56:fc:be:c8:00:fd:ba:8b:7a:4c:fb:
         81:1d:7b:d5:c2:66:b3:49:49:77:c2:7a:7a:4f:0c:e6:37:2a:
         0e:fc:c4:a3:7c:22:5d:a8:d7:88:3e:ff:1f:04:79:94:8c:45:
         ba:46:e0:0e:11:dc:e2:6e:57:a2:47:08:be:b7:e5:bd:fa:10:
         98:01:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:19 2026 by rpki-client