Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer (raw, json)
Hash identifier:          fW5QAEx/HRmDRoPhU/CnCyUK32c5b6ejBc79RO5pNzM=
Subject key identifier:   F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029476
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:20:01 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 140054
                          IP: 103.147.230.0/24
                          IP: 103.178.82.0/24
                          IP: 2001:df2:a780::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169078 (0x29476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:20:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:a5:27:dd:e1:9e:5d:fa:b4:54:1a:4c:5a:
                    04:37:9b:5e:73:19:aa:e8:a9:a0:53:0d:fb:dc:78:
                    81:9d:92:ad:b3:58:bb:d3:0f:49:e0:ea:58:1c:21:
                    ea:5e:e0:9e:e3:79:89:a9:97:b2:3b:7c:f6:9d:f3:
                    2f:27:6f:dd:01:a2:b0:80:e5:68:48:ae:3a:ba:ba:
                    47:b9:b0:7f:46:2c:b0:ba:ea:42:a4:79:4f:f5:3d:
                    fc:d6:3a:c9:5f:17:fa:50:cb:36:2c:ce:a1:62:4e:
                    48:43:38:30:dd:a7:c2:03:49:6b:c6:d7:7d:07:c9:
                    37:73:b6:83:23:e6:c9:fd:44:e4:2d:52:7c:1f:95:
                    a9:ce:1a:98:c1:33:a5:62:0d:f7:5e:ad:39:0b:c2:
                    ea:d4:01:93:ac:44:b7:8f:be:fe:9c:b8:3a:27:6e:
                    db:9d:9b:3c:95:8e:cf:34:bb:e9:aa:6a:e2:47:7c:
                    03:a3:49:ee:da:d0:bf:80:d7:fa:5c:81:40:9d:a5:
                    bf:98:78:bb:41:67:77:0f:de:e6:5d:a7:83:9f:6d:
                    32:9d:c1:dd:4f:57:ea:c2:4e:53:54:f8:b3:73:9e:
                    2e:29:1c:6f:0b:c2:59:ef:ba:37:88:7f:59:cf:fe:
                    d6:3a:a6:a4:ea:a3:3c:1d:6d:8d:a8:03:1a:d5:62:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140054

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.230.0/24
                  103.178.82.0/24
                IPv6:
                  2001:df2:a780::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:cf:71:a2:f4:15:41:bd:8d:22:e9:e0:32:3e:56:fe:4d:
         e9:91:6a:65:1e:aa:88:5d:7c:0e:93:52:da:4a:02:d6:89:47:
         fb:59:ed:fc:d1:33:48:41:7f:09:22:e5:98:4b:c1:dc:ae:82:
         b7:e7:8a:12:2d:cd:9a:9a:88:8c:82:fe:80:72:6d:5c:e7:e7:
         a4:14:28:16:82:f0:75:66:e6:35:48:a8:77:36:0b:33:61:d9:
         fb:f3:47:43:f5:c6:ba:4f:19:75:5f:ce:cd:d1:94:24:c5:99:
         25:e2:2f:e0:d9:07:d5:d9:b9:63:16:23:cd:f6:71:cf:7e:03:
         af:bf:cc:10:76:07:13:31:6e:a9:00:da:21:63:d5:68:3f:70:
         0e:9d:33:69:ba:06:6a:a8:6b:72:96:64:9b:69:ae:2d:fa:8a:
         f8:6d:7b:1a:81:60:cb:fe:90:be:55:e3:0b:9a:6d:f1:3e:c6:
         21:45:f1:63:e2:3b:a1:48:f1:ee:73:87:b5:54:f9:62:ca:83:
         10:9e:a8:0b:e0:e2:2f:fb:cc:52:8c:48:8a:b5:b1:c9:eb:80:
         e9:ed:88:f1:5e:63:4e:b4:88:e3:08:bf:84:bb:01:ea:ba:56:
         dd:9d:ef:7d:b6:ba:1f:00:86:73:74:37:fa:b8:84:79:9f:a6:
         e9:75:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:26 2026 by rpki-client