Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
File:                     58raXwiB13vqSLB2ijdmtQBlrwg.cer (raw, json)
Hash identifier:          41/dSOaXYlBpfMd9rtNUhEjZiVnw3Tp+emHXruiKk/E=
Subject key identifier:   E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AAB5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/708aafaf-00b4-485b-854c-0b32ca30f57b/notification.xml
Certificate not before:   Tue 07 Apr 2026 13:42:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 58588
                          AS: 154263
                          IP: 43.224.76.0/22
                          IP: 103.8.172.0/22
                          IP: 2403:b300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174773 (0x2aab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  7 13:42:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:8f:bb:f5:34:5c:6a:f4:f7:41:7f:c3:7e:
                    73:13:40:35:ec:79:ed:ba:3a:af:41:fe:09:65:89:
                    9b:dc:3c:78:22:bb:cb:00:a8:0a:22:88:6d:65:75:
                    5f:76:fe:8f:78:9e:45:5d:60:60:fa:8e:14:30:86:
                    29:4c:33:72:74:e9:29:54:b1:32:f7:d0:b4:0e:06:
                    b5:54:2f:a1:28:49:a2:07:26:9b:5e:46:e5:d9:23:
                    d4:fd:98:84:b4:22:0f:c8:ec:1b:7a:9b:73:d3:ce:
                    05:76:f0:78:99:fb:5e:6e:65:97:ae:01:94:0e:61:
                    34:b0:7e:21:3a:3f:e5:71:22:08:c0:09:d7:5c:a5:
                    23:a5:59:37:49:fa:57:53:04:f6:a9:ef:93:7e:dd:
                    d9:0c:31:ac:bf:76:f0:30:0c:fe:b3:36:7b:6b:cc:
                    b9:3a:72:b9:68:79:74:c7:7c:d2:0d:5d:f4:fa:f8:
                    89:b8:74:72:b3:c3:5e:61:34:84:be:5b:c6:ed:68:
                    9e:11:48:15:54:e2:49:75:1e:55:05:6a:88:c8:a7:
                    d7:7a:d7:cf:ce:bf:23:58:55:e0:c9:f8:75:0a:9e:
                    b7:39:19:1c:2d:21:b1:75:cb:db:14:54:1c:d8:73:
                    88:5a:19:d1:7c:77:9d:24:22:2d:57:4b:26:a9:59:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/708aafaf-00b4-485b-854c-0b32ca30f57b/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58588
                  154263

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.76.0/22
                  103.8.172.0/22
                IPv6:
                  2403:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:a1:49:0b:cf:c2:0e:61:c7:8c:39:95:ea:a6:9a:95:d6:
         29:48:1c:e1:38:02:9d:94:33:e7:87:40:97:7a:de:92:cd:70:
         38:e6:8f:7b:f6:c7:3b:8f:54:72:ac:26:dc:03:02:34:51:f5:
         1b:b8:3f:cf:df:3c:6f:67:44:d9:59:35:0b:54:24:7c:b1:e5:
         6f:e2:09:30:32:5e:44:60:7a:fe:f6:40:43:18:ed:a8:b0:9e:
         d4:1c:46:03:d5:79:03:72:ad:1c:1d:19:f4:11:51:d1:8a:d7:
         0a:91:d8:9d:64:6c:7c:28:20:ed:ac:95:da:8c:98:47:0c:25:
         01:b3:ad:b2:65:fa:33:9b:7a:52:8a:7f:0a:88:95:76:49:8a:
         55:d1:a7:9b:c1:d7:8e:0d:56:58:b4:b1:b8:e8:68:0e:7c:51:
         57:44:d0:2a:55:b6:ac:e8:f6:36:38:39:75:f4:45:13:ad:88:
         be:9a:79:db:16:ce:97:cd:db:0b:e8:51:03:64:e5:1d:c7:02:
         9a:1c:53:dc:00:ed:23:37:0f:c6:74:53:05:04:e4:84:cc:29:
         fc:8d:ef:b2:95:28:b7:e5:43:4f:fb:ab:b7:06:fd:23:17:ac:
         0a:a7:ff:60:46:a7:ce:e0:16:98:a6:e0:f8:cd:bd:94:b6:c0:
         71:73:83:28
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIDAqq1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwNzEzNDIyNloXDTI3MDcwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4ODFENzdCRUE0
OEIwNzY4QTM3NjZCNTAwNjVBRjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkKePu/U0XGr090F/w35zE0A17HntujqvQf4JZYmb3Dx4IrvLAKgKIoht
ZXVfdv6PeJ5FXWBg+o4UMIYpTDNydOkpVLEy99C0Dga1VC+hKEmiByabXkbl2SPU
/ZiEtCIPyOwbeptz084FdvB4mftebmWXrgGUDmE0sH4hOj/lcSIIwAnXXKUjpVk3
SfpXUwT2qe+Tft3ZDDGsv3bwMAz+szZ7a8y5OnK5aHl0x3zSDV30+viJuHRys8Ne
YTSEvlvG7WieEUgVVOJJdR5VBWqIyKfXetfPzr8jWFXgyfh1Cp63ORkcLSGxdcvb
FFQc2HOIWhnRfHedJCItV0smqVmEvQIDAQABo4IDWzCCA1cwHQYDVR0OBBYEFOfK
2l8Igdd76kiwdoo3ZrUAZa8IMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBWgYIKwYBBQUHAQsEggFMMIIBSDBjBggr
BgEFBQcwBYZXcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2Iv
MG8GCCsGAQUFBzAKhmNyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzcwOGFhZmFmLTAwYjQtNDg1Yi04NTRjLTBiMzJjYTMw
ZjU3Yi9tYW5pZmVzdC5tZnQwcAYIKwYBBQUHMA2GZGh0dHBzOi8vcnBraS1ycmRw
LnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3JyZHAvNzA4YWFmYWYtMDBiNC00ODVi
LTg1NGMtMGIzMmNhMzBmNTdiL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgB
Af8EEDAOoAwwCgIDAOTcAgMCWpcwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD
BAIr4EwDBAJnCKwwDQQCAAIwBwMFACQDswAwDQYJKoZIhvcNAQELBQADggEBAGt+
oUkLz8IOYceMOZXqppqV1ilIHOE4Ap2UM+eHQJd63pLNcDjmj3v2xzuPVHKsJtwD
AjRR9Ru4P8/fPG9nRNlZNQtUJHyx5W/iCTAyXkRgev72QEMY7aiwntQcRgPVeQNy
rRwdGfQRUdGK1wqR2J1kbHwoIO2sldqMmEcMJQGzrbJl+jObelKKfwqIlXZJilXR
p5vB144NVli0sbjoaA58UVdE0CpVtqzo9jY4OXX0RROtiL6aedsWzpfN2wvoUQNk
5R3HApocU9wA7SM3D8Z0UwUE5ITMKfyN77KVKLflQ0/7q7cG/SMXrAqn/2BGp87g
Fpim4PjNvZS2wHFzgyg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:19 2026 by rpki-client