Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
File:                     6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer (raw, json)
Hash identifier:          aLBWkkF/KwASXcERGAaTmm7ghXUn1DdauX2R1d+7TtI=
Subject key identifier:   EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B5FF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 May 2026 23:42:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132694
                          IP: 103.18.92.0/22
                          IP: 2406:7700::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177663 (0x2b5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 20 23:42:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:d1:eb:f0:6a:5c:77:0d:87:9d:36:bf:a3:
                    21:cb:24:f1:9a:fb:55:26:60:a1:6c:7e:95:f5:9d:
                    ae:57:4d:ff:36:df:7c:64:5f:65:d0:d7:3a:45:6f:
                    d9:3b:40:7d:2f:43:4c:d9:cd:37:6f:9d:fc:0e:1a:
                    f0:c0:df:2a:f7:ce:7c:57:13:ef:f0:c3:c9:c7:cb:
                    eb:5d:fa:0a:80:2d:7e:b4:f6:c8:22:c2:f7:1b:c3:
                    c4:1a:7b:b6:91:ad:9e:27:f0:45:08:51:f0:bd:4e:
                    d0:d0:12:8a:d8:9d:d8:e1:6a:60:3d:04:e0:cf:1b:
                    1e:df:b1:1f:49:fa:75:b6:46:c2:a7:ee:63:ad:99:
                    cd:ad:c8:47:fc:a2:4f:36:65:9c:69:fa:29:61:d4:
                    63:bd:bc:54:ce:a4:80:d2:82:51:f0:9f:dc:d5:7f:
                    f1:fa:0a:82:9a:29:72:a4:2c:2a:95:94:10:41:7f:
                    b4:4d:9b:06:22:19:89:92:7a:00:ff:f1:cd:08:b7:
                    85:25:21:63:b6:d7:e2:8c:cf:14:ff:ee:ee:65:6d:
                    aa:09:45:58:39:05:48:39:56:0c:06:ac:51:58:ba:
                    4e:93:91:58:b6:89:c6:cd:79:30:7b:72:5d:3d:04:
                    cd:e8:81:f4:60:c4:b8:1e:be:0c:29:36:cf:a7:b0:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132694

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.92.0/22
                IPv6:
                  2406:7700::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:d3:75:b6:06:90:4e:a5:d4:c7:17:21:ac:ec:56:05:df:cb:
         79:1f:ab:ed:cc:b6:47:98:1b:f3:9f:c0:94:9f:49:b5:57:98:
         1f:37:99:ad:77:f0:4d:0f:95:fd:a0:0c:04:19:f6:9c:05:a2:
         b8:ed:dc:c7:06:23:20:87:cf:05:7d:b8:7e:90:37:e6:d4:25:
         b4:e0:7c:9c:a4:79:4d:f3:31:0c:ce:36:36:31:3f:1b:95:3d:
         7b:6b:2f:59:21:96:cf:bd:de:8a:79:e7:cf:99:20:a3:71:e7:
         1f:b1:c4:43:8a:d5:66:6f:b8:8f:c2:19:5d:c6:37:c1:09:a9:
         70:19:74:4b:84:94:4a:b2:1e:4e:c0:37:ea:15:72:f8:79:ff:
         3f:d1:e2:7a:46:67:41:31:de:e7:b6:69:e8:3d:44:bd:e8:03:
         74:b8:d9:9c:46:37:12:dd:c9:ee:c0:77:a6:5c:aa:fc:25:54:
         af:07:46:9d:75:83:9b:7d:b7:69:d9:5c:93:80:a6:09:74:c9:
         02:89:e5:cf:1b:2d:bf:16:40:f9:75:b8:c8:87:5d:59:0d:c7:
         d6:d3:88:31:a2:92:8d:9a:70:7c:85:d8:74:b3:e3:71:08:cd:
         80:46:f1:22:af:f8:8d:e6:6c:74:47:e9:db:2e:77:b2:bb:5d:
         79:9a:24:88
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArX/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyMDIzNDIyMFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5
NDJCNTYyQkQyNTYzQ0FFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1ONHr8Gpcdw2HnTa/oyHLJPGa+1UmYKFsfpX1na5XTf8233xkX2XQ1zpFb9k7
QH0vQ0zZzTdvnfwOGvDA3yr3znxXE+/ww8nHy+td+gqALX609sgiwvcbw8Qae7aR
rZ4n8EUIUfC9TtDQEorYndjhamA9BODPGx7fsR9J+nW2RsKn7mOtmc2tyEf8ok82
ZZxp+ilh1GO9vFTOpIDSglHwn9zVf/H6CoKaKXKkLCqVlBBBf7RNmwYiGYmSegD/
8c0It4UlIWO21+KMzxT/7u5lbaoJRVg5BUg5VgwGrFFYuk6TkVi2icbNeTB7cl09
BM3ogfRgxLgevgwpNs+nsM+PAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6suV/wV9
ZBQAyjCUK1Yr0lY8rrQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBNTIyLzg4NjkyQUJBNTM0MjExRUM4Q0QyRDcyMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dW
OVpCUUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZWMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZxJcMA0EAgAC
MAcDBQAkBncAMA0GCSqGSIb3DQEBCwUAA4IBAQDY03W2BpBOpdTHFyGs7FYF38t5
H6vtzLZHmBvzn8CUn0m1V5gfN5mtd/BND5X9oAwEGfacBaK47dzHBiMgh88Ffbh+
kDfm1CW04HycpHlN8zEMzjY2MT8blT17ay9ZIZbPvd6KeefPmSCjcecfscRDitVm
b7iPwhldxjfBCalwGXRLhJRKsh5OwDfqFXL4ef8/0eJ6RmdBMd7ntmnoPUS96AN0
uNmcRjcS3cnuwHemXKr8JVSvB0addYObfbdp2VyTgKYJdMkCieXPGy2/FkD5dbjI
h11ZDcfW04gxopKNmnB8hdh0s+NxCM2ARvEir/iN5mx0R+nbLneyu115miSI
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:11:37 2026 by rpki-client