Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72aim_38uukyeAAOphM_KUuw9t4.cer
File:                     72aim_38uukyeAAOphM_KUuw9t4.cer (raw, json)
Hash identifier:          eB49+RtnpyhIJOYv9417Y+WTlqjQhu6TacENsoVJ1Kw=
Subject key identifier:   EF:66:A2:9B:FD:FC:BA:E9:32:78:00:0E:A6:13:3F:29:4B:B0:F6:DE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BEF8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9188701/23E840986ED711F19D5D49CA6DA30FBC/72aim_38uukyeAAOphM_KUuw9t4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9188701/23E840986ED711F19D5D49CA6DA30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 23 Jun 2026 07:42:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132241
                          IP: 103.8.24.0/22
                          IP: 163.47.200.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179960 (0x2bef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 23 07:42:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9188701, serialNumber=EF66A29BFDFCBAE93278000EA6133F294BB0F6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:2e:f6:1e:a7:e2:35:20:87:70:b8:80:ec:
                    62:91:73:ed:72:0f:7d:11:04:b2:65:8c:9f:61:44:
                    5d:bc:05:e7:f6:15:b9:9d:6f:02:06:27:46:a2:bf:
                    78:5c:3f:32:ce:7b:2c:ae:4f:76:a1:ff:8c:de:15:
                    e6:87:57:81:49:0b:3a:f9:3f:5a:64:91:29:a2:af:
                    bd:67:06:6d:72:ae:32:b2:19:2e:24:ab:88:fc:5e:
                    29:39:f8:ca:dd:52:05:02:b7:1c:de:34:8d:35:94:
                    ae:30:8b:6d:eb:c0:a3:76:c7:ba:53:b1:04:31:14:
                    ea:19:96:ee:a4:ae:a4:16:18:40:cd:a1:4d:a7:85:
                    cf:87:82:f5:48:f6:98:67:cf:bd:d8:f7:d9:ff:57:
                    b0:50:43:00:91:3e:20:b3:7c:8a:da:8a:75:87:71:
                    52:96:6b:78:4d:a2:b2:dc:1b:06:59:50:a5:c0:69:
                    6c:24:f4:b9:6d:73:ef:ff:75:6a:64:2f:a3:dc:b3:
                    73:53:b4:20:f4:41:5a:73:a7:23:0e:41:e4:86:0e:
                    a0:0d:74:7f:73:64:27:28:20:4b:42:6c:2b:8e:ec:
                    3d:15:71:a3:69:0e:ca:ea:fc:a1:8a:63:f6:9a:b2:
                    f8:07:92:7e:5d:d2:8e:82:d1:da:ca:22:d3:74:14:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:66:A2:9B:FD:FC:BA:E9:32:78:00:0E:A6:13:3F:29:4B:B0:F6:DE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188701/23E840986ED711F19D5D49CA6DA30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188701/23E840986ED711F19D5D49CA6DA30FBC/72aim_38uukyeAAOphM_KUuw9t4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132241

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.24.0/22
                  163.47.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:68:76:40:59:ee:c9:59:7b:0b:27:5c:17:f6:b3:e8:4f:ec:
         87:db:8c:70:e8:92:87:a3:77:95:81:a4:b2:95:84:65:74:ce:
         07:e1:94:e2:41:47:be:bf:9f:70:d9:03:e3:e6:a6:a6:d2:df:
         aa:5b:51:e0:34:cd:86:bd:c8:ef:67:8a:75:15:e4:96:31:5a:
         73:c1:3e:f2:1d:1a:46:74:9f:bd:47:58:e2:a0:fc:e5:57:ce:
         2f:26:02:db:61:19:f2:bb:cd:83:d2:56:5f:61:22:cf:ec:85:
         04:d6:40:d8:03:ca:78:26:2f:a7:42:fb:ab:99:df:88:bf:7d:
         50:72:d4:18:b9:f1:67:4d:de:a6:c1:38:54:2a:93:4d:21:5c:
         fa:12:47:e6:98:c2:2b:8f:f7:52:63:68:5e:43:6d:d9:a8:6e:
         48:49:40:1e:76:7a:f2:9c:d3:36:2f:4b:be:5b:d5:9f:de:d4:
         25:46:2d:be:63:64:6a:8f:2b:bc:c7:02:df:ea:8f:8a:42:82:
         4d:55:70:95:1e:12:1a:a1:c4:70:59:f8:12:ee:a5:18:be:bb:
         e1:3d:16:41:4c:44:e3:eb:89:bf:87:d5:6e:61:63:4a:33:ad:
         1f:b2:ba:6b:dd:ae:83:0a:47:98:8b:3e:74:01:69:51:60:86:
         ee:c1:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:05 2026 by rpki-client