Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
File:                     2vWZnAdAuMks1UA3tpsETNValVg.cer (raw, json)
Hash identifier:          KqMLXOr3wG0r5TwtcfCGCvSzQpb9pHsSGEear7qWSgI=
Subject key identifier:   DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BAD4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 04 Jun 2026 06:22:28 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 150293
                          AS: 154701
                          IP: 103.241.228.0/22
                          IP: 118.193.16.0/20
                          IP: 118.193.80.0/20
                          IP: 223.255.248.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178900 (0x2bad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  4 06:22:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:ab:35:0d:5d:ef:fe:22:22:26:19:1b:86:
                    dd:cf:47:53:2f:e4:c1:82:37:5e:8d:99:dd:88:14:
                    75:b0:ae:2f:cd:97:d7:a0:e8:6a:4d:12:1a:01:aa:
                    ab:52:e2:f4:c9:3b:27:2d:f8:9a:5e:65:3a:f2:e8:
                    72:59:c5:1b:2d:29:96:2c:2d:f1:4a:aa:ca:d2:8e:
                    cd:7b:15:c8:c9:2d:e0:6b:01:52:70:47:44:4e:16:
                    cf:ba:3b:4c:8d:ca:fe:a2:46:a7:b0:35:53:41:12:
                    26:6f:de:dd:a3:80:28:57:e1:d8:eb:fd:1b:70:c6:
                    cf:24:b2:ab:55:b4:0d:a0:87:6f:a1:5c:b8:16:7c:
                    9a:a8:40:47:2a:c3:14:9b:33:2a:a5:92:cb:88:96:
                    a0:45:ed:9d:c1:96:eb:52:8a:80:31:1d:b9:f9:57:
                    ac:33:e8:32:e9:40:69:8d:57:8e:38:10:4b:37:d4:
                    ac:0f:aa:39:bd:62:8e:4c:8b:9f:15:38:32:53:6c:
                    37:98:19:87:dd:8c:2c:ad:ce:7b:60:30:6d:0d:4f:
                    59:dd:a2:f8:ad:d6:2d:85:84:de:fa:f8:da:7c:5e:
                    7e:ad:18:18:fc:0d:24:00:d7:97:9a:0c:b7:be:b6:
                    9b:67:88:f6:4e:0d:12:1a:a7:12:b4:63:eb:7a:3b:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150293
                  154701

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.228.0/22
                  118.193.16.0/20
                  118.193.80.0/20
                  223.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:bf:e4:34:43:14:c6:a2:15:5b:81:f0:1e:fb:eb:ec:99:
         5c:b6:fc:ff:2e:3c:1c:8b:7f:df:50:be:74:ca:18:3c:93:93:
         9f:3e:94:e6:17:f4:06:6c:a4:cd:b9:ab:37:11:d7:b9:16:13:
         d2:e5:24:27:71:41:f1:d8:ca:b1:7a:4f:a3:53:0b:90:5b:56:
         cc:78:3d:e4:c8:64:40:89:19:29:bf:92:67:c0:9d:7c:e8:93:
         40:f7:c9:f3:3d:bc:66:aa:3d:55:63:c4:57:0b:b1:16:fb:31:
         97:51:bf:ed:45:9b:fb:45:d2:8b:29:ed:bb:ba:28:89:4f:ed:
         3b:c2:9d:f4:71:fe:4c:0a:dc:05:cf:c0:40:e4:f1:6a:ab:7c:
         d2:eb:3c:b7:6d:c9:36:a3:00:63:7f:e1:ab:49:86:dc:79:19:
         99:c9:fd:d4:25:dc:83:48:32:b8:4b:fa:68:45:df:f5:dc:c9:
         06:1d:9f:3e:26:dc:48:12:da:21:e6:ab:18:ac:42:4e:2c:5a:
         5e:f5:74:04:9a:8a:ad:c0:f1:ca:0e:f0:8d:40:7d:63:ad:13:
         bd:2b:91:88:bf:1a:d0:f3:9d:6b:f9:41:cc:b3:65:d6:4a:6a:
         d6:7f:e5:93:91:3e:20:de:ef:dc:e6:d7:32:d8:31:36:1a:46:
         3d:8a:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:20 2026 by rpki-client