Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
File:                     30PPMfEc2OafGltFHUP2ixRHa0c.cer (raw, json)
Hash identifier:          5dkZUtcd1WIOzcj0iqhjspYXxeEbmQE9ZkobBLdgnG4=
Subject key identifier:   DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B6EF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 May 2026 14:38:17 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 142050
                          IP: 103.165.186.0/23
                          IP: 2407:4d40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177903 (0x2b6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 25 14:38:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:85:5c:0b:76:12:80:13:c7:92:fc:16:11:
                    cd:32:73:d1:2a:c9:c0:17:4c:0c:ed:c5:e7:b6:b4:
                    69:5d:8c:c3:ae:55:38:24:07:d5:ec:1d:89:68:7e:
                    38:8e:a1:08:9e:ae:cf:38:d3:9a:dc:6f:03:d2:e0:
                    0b:4c:1a:1b:0d:fa:a9:ff:4b:82:bc:9d:87:df:ba:
                    c9:73:3f:84:5e:80:e4:4c:60:50:20:e1:b0:4a:43:
                    8b:ba:3e:32:62:8f:b0:e8:a7:e2:e5:d3:70:4f:7e:
                    87:c6:35:0e:8f:23:06:36:0e:f5:43:9b:ff:39:37:
                    2f:11:3b:23:e7:c3:09:a0:1e:c2:67:b6:ae:8a:de:
                    53:b5:df:6c:98:93:49:aa:ac:f4:c9:ef:73:bf:39:
                    84:53:d8:08:10:49:3d:d7:7d:b9:91:a6:d7:1f:29:
                    1a:34:50:ba:ee:fc:fa:30:c5:5d:6e:1d:9f:1d:09:
                    09:e1:d6:1b:c1:5b:c4:f5:83:33:ce:0b:15:3f:b9:
                    ce:6d:dc:32:52:5a:39:a0:d5:ff:74:5f:13:38:af:
                    b5:78:20:34:86:45:1c:75:56:84:73:09:5e:76:b2:
                    bf:62:2a:37:27:f8:01:b6:af:bd:26:d7:3c:42:9d:
                    6f:f7:45:c8:58:ef:0e:06:d8:01:22:89:7d:84:7a:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142050

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.186.0/23
                IPv6:
                  2407:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:43:12:b6:5a:19:4e:a5:55:37:de:b8:3d:db:c6:65:e6:
         87:4d:ad:36:a3:9c:4d:75:c9:55:f6:29:68:aa:04:d1:9c:45:
         c3:cc:08:11:78:a6:8b:0b:20:35:69:08:66:c5:9b:2b:9c:a9:
         be:6f:cb:71:9f:4e:83:6f:43:68:92:ba:f7:e1:ca:f6:08:13:
         b3:31:cb:ae:99:da:f8:f8:04:16:71:17:85:6a:cf:86:3a:35:
         fb:9d:d9:ca:71:08:9a:d5:00:9e:5f:3b:04:70:a9:1c:2e:22:
         fe:47:d6:50:bb:73:06:9b:a0:f0:6f:3c:c0:db:1e:04:15:a8:
         25:41:b7:a3:c4:da:ec:73:2f:2b:48:36:68:5c:cc:1b:19:b7:
         66:fb:8c:8d:f5:15:40:27:da:ac:87:97:9e:08:3e:50:a7:1f:
         bb:1a:6c:03:9f:ad:69:b7:b8:f4:d9:df:90:d9:2f:b3:21:f4:
         28:de:05:04:f0:26:41:fb:ee:f3:60:7a:da:2b:8f:8c:42:40:
         af:11:ec:03:b3:06:50:e5:1f:91:88:8e:7f:61:b8:e0:49:66:
         fb:9b:91:21:ff:7a:56:f9:fb:c9:46:4f:4f:c2:d2:78:08:05:
         37:76:10:6b:6a:96:27:fd:dc:0e:39:3f:b5:f2:ec:b6:eb:30:
         f4:b4:c6:18
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArbvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyNTE0MzgxN1oXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0
NTFENDNGNjhCMTQ0NzZCNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPh4VcC3YSgBPHkvwWEc0yc9EqycAXTAztxee2tGldjMOuVTgkB9XsHYlofjiO
oQiers8405rcbwPS4AtMGhsN+qn/S4K8nYffuslzP4RegORMYFAg4bBKQ4u6PjJi
j7Dop+Ll03BPfofGNQ6PIwY2DvVDm/85Ny8ROyPnwwmgHsJntq6K3lO132yYk0mq
rPTJ73O/OYRT2AgQST3XfbmRptcfKRo0ULru/PowxV1uHZ8dCQnh1hvBW8T1gzPO
CxU/uc5t3DJSWjmg1f90XxM4r7V4IDSGRRx1VoRzCV52sr9iKjcn+AG2r70m1zxC
nW/3RchY7w4G2AEiiX2EeksRAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU30PPMfEc
2OafGltFHUP2ixRHa0cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUzRDREL0VENkExOTkyOUFFNzExRUI4QTA0NTYyNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFM0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZF
YzJPYWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiriMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ6W6MA0EAgAC
MAcDBQAkB01AMA0GCSqGSIb3DQEBCwUAA4IBAQAqR0MStloZTqVVN964PdvGZeaH
Ta02o5xNdclV9iloqgTRnEXDzAgReKaLCyA1aQhmxZsrnKm+b8txn06Db0Nokrr3
4cr2CBOzMcuumdr4+AQWcReFas+GOjX7ndnKcQia1QCeXzsEcKkcLiL+R9ZQu3MG
m6DwbzzA2x4EFaglQbejxNrscy8rSDZoXMwbGbdm+4yN9RVAJ9qsh5eeCD5Qpx+7
GmwDn61pt7j02d+Q2S+zIfQo3gUE8CZB++7zYHraK4+MQkCvEewDswZQ5R+RiI5/
YbjgSWb7m5Eh/3pW+fvJRk9PwtJ4CAU3dhBrapYn/dwOOT+18uy26zD0tMYY
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:29 2026 by rpki-client