Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
File:                     1pFVgc9TrGiZOPctqL81vazrOB0.cer (raw, json)
Hash identifier:          npdedsr4ALk6hLLiausWeLNkQTiHLWK28Gq1DNF+yk4=
Subject key identifier:   D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C08D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 08:00:32 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 131217
                          AS: 150183
                          IP: 103.160.105.0/24
                          IP: 203.161.181.0/24
                          IP: 2001:df0:2e80::/48
                          IP: 2001:df0:2f80::/48
                          IP: 2001:df0:3080::/48
                          IP: 2001:df1:6000::/46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180365 (0x2c08d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 30 08:00:32 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A91A944A, serialNumber=D6915581CF53AC689938F72DA8BF35BDACEB381D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:3a:56:75:df:62:a6:f0:15:60:39:c6:c5:
                    54:e2:cd:3e:ec:2a:dd:0d:dc:80:9d:d5:31:30:68:
                    93:c7:2f:fa:6f:bc:ba:cf:2b:22:a7:69:fb:97:c5:
                    13:46:3e:8b:a7:9f:42:dd:6f:78:29:d4:98:ea:92:
                    c0:10:d2:49:83:8e:bb:d8:5d:71:3b:7b:ef:8f:d3:
                    64:99:05:96:cb:9d:41:c7:92:d5:f5:22:d0:72:9c:
                    f5:3d:3c:b1:4e:6a:5d:b8:11:13:69:62:f3:c2:d9:
                    40:35:ba:2b:a5:43:c4:b4:2e:74:44:98:d3:bf:42:
                    71:d3:56:38:03:ac:93:05:2e:8d:07:11:75:77:71:
                    66:72:0a:56:b7:31:5c:5a:88:86:1e:8e:28:c6:10:
                    88:10:21:b6:a6:1c:3b:38:49:f5:7b:e2:68:24:f2:
                    a1:22:4d:28:7e:cf:22:eb:b0:18:88:cf:aa:45:3f:
                    29:2d:e6:36:2d:1e:18:0a:96:4c:3c:0b:92:05:f7:
                    fc:6f:f0:8b:b5:37:51:a3:f6:cb:c2:c1:71:74:29:
                    b0:15:18:e4:6b:0f:fa:8e:43:d8:10:c8:41:a3:aa:
                    a5:ff:c5:90:80:82:41:24:d8:24:52:65:3a:c3:3f:
                    86:93:5b:bb:8a:10:e9:51:56:ac:f6:d0:8c:19:bc:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131217
                  150183

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.105.0/24
                  203.161.181.0/24
                IPv6:
                  2001:df0:2e80::/48
                  2001:df0:2f80::/48
                  2001:df0:3080::/48
                  2001:df1:6000::/46

    Signature Algorithm: sha256WithRSAEncryption
         cd:ed:a5:49:2a:49:fe:8e:1c:3c:af:e1:3a:94:87:25:d9:92:
         98:75:32:cb:cc:11:9c:e7:25:b8:3b:d0:a8:b7:62:e2:41:9f:
         0d:e7:ea:38:fe:01:6e:61:5d:09:fe:d9:ab:7e:f5:2e:3c:40:
         0d:9c:98:5d:2e:f3:d7:15:62:4d:a4:32:9f:93:3e:db:57:bb:
         35:8d:fb:0e:2b:e3:1b:0e:ee:80:8a:7a:28:7c:17:d6:60:f8:
         12:55:63:f1:04:c1:29:ee:c2:31:76:95:70:b8:1c:eb:5b:0f:
         02:e7:0d:e7:13:d2:5c:57:55:ec:0b:a6:ed:95:5d:3c:c0:9d:
         a0:bb:d6:c6:8a:28:aa:b9:9c:b0:40:cf:cc:7d:a6:18:8f:3e:
         6b:f3:93:5f:d4:11:99:93:10:a8:71:3c:ef:3b:08:1f:3c:d9:
         34:4b:f9:d8:46:73:cc:91:ae:74:48:8c:35:f3:a7:93:df:e1:
         26:a8:30:85:1d:1c:9c:a9:85:10:86:f4:f1:d2:e5:e2:29:60:
         8e:6b:eb:8d:e5:58:1b:c9:60:66:28:9c:66:02:65:cb:af:19:
         96:4d:1c:56:50:db:19:92:dd:14:86:0e:32:8f:c5:76:8f:ee:
         34:76:dd:7e:8b:a4:c0:d2:1e:fa:6f:b3:19:39:1d:87:5b:86:
         3b:43:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:02 2026 by rpki-client