Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
File:                     8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer (raw, json)
Hash identifier:          5RZ7BpkkCyAO11JrfF3Fm8A4jVBorjfWGS63TM6LgxQ=
Subject key identifier:   F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BA3D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 13:11:55 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 203.34.177.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 16:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178749 (0x2ba3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 13:11:55 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:9d:c7:14:31:b1:59:2b:1f:83:44:1a:cd:
                    1a:ef:44:28:01:0e:70:83:fa:33:ec:7a:74:45:68:
                    05:44:fe:f9:6c:8d:51:29:0e:96:07:06:7c:b8:12:
                    7a:e0:96:23:5d:d0:97:5a:6b:9d:09:db:6b:d6:5e:
                    ba:82:2e:19:01:70:a8:3d:e4:1a:c9:f0:13:b0:da:
                    c1:37:96:06:46:6b:f2:11:51:e3:27:84:0b:3d:e0:
                    81:7b:2f:59:d4:f7:bc:17:96:fd:bb:d8:59:e7:43:
                    00:75:ea:13:04:19:46:22:5b:da:9b:d1:f3:dc:5b:
                    fb:9d:28:a5:85:8a:e8:0c:e9:7b:04:9b:8c:ed:ed:
                    03:54:0d:b4:01:02:6a:84:71:85:3e:ee:7a:66:ae:
                    aa:e6:0b:a4:bc:17:ad:fc:f0:21:84:17:e5:e4:7c:
                    aa:f2:e5:0a:cb:c4:3e:b4:17:3b:24:b7:18:aa:07:
                    75:53:aa:1a:10:1e:37:9b:d3:02:ce:63:f2:09:ea:
                    93:c9:59:6c:b0:89:c6:50:f6:b0:6f:1a:62:61:6e:
                    9c:47:01:00:a2:27:d3:50:f9:b3:3f:ef:65:4e:7e:
                    c1:32:36:49:3f:3b:25:ea:49:64:c2:0f:1f:4e:b5:
                    75:1c:80:ec:ad:2a:4f:be:83:5e:98:c9:d8:bf:c0:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ea:08:4c:58:d1:98:60:a8:13:41:ea:d4:cc:b3:bb:32:56:
         cf:92:25:45:03:b0:74:a2:7d:1a:5d:ee:f7:6e:7f:c9:83:f0:
         c9:49:3d:e2:34:d0:b5:ec:0c:c3:14:a7:25:7a:d1:2f:01:55:
         f3:9d:dd:06:b3:e7:72:a1:16:0b:a4:91:5c:06:ea:43:85:70:
         80:7f:fe:79:38:c3:dc:1f:32:03:35:33:2b:72:61:e7:d3:94:
         76:8f:4d:83:fa:3f:f8:f1:43:cc:d1:fe:a0:a8:2d:a9:de:b7:
         7f:f1:be:d6:ab:b9:95:bd:21:03:6e:05:21:1f:40:4e:49:10:
         41:d0:32:e8:f4:4c:dd:1d:b6:c4:28:4f:64:c3:62:38:c1:59:
         44:85:fd:d3:52:b3:9b:57:6f:fb:ea:7d:d3:d7:18:c1:7b:dd:
         04:3f:7d:04:cf:72:c3:ff:6e:ba:93:6b:8a:8d:40:5f:12:03:
         34:80:3b:c1:06:6a:92:26:f8:60:54:b4:6a:a7:1c:9f:16:b0:
         1c:a0:1e:c8:06:51:30:60:91:d5:d2:de:30:da:9a:c0:80:0c:
         b0:fe:30:58:a6:6e:e1:b3:56:9f:94:33:ee:02:01:a8:3f:d6:
         b5:0b:53:0f:d5:1d:db:c6:96:45:e1:c7:75:96:be:24:f7:6e:
         76:3b:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:10 2026 by rpki-client