Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.cer (raw, json)
Hash identifier:          yQYG2Ok6Km45lZTbnSMckSNehmi9aWSCmlDJGXFM7HE=
Subject key identifier:   01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AAE8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Apr 2026 13:06:56 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 133415
                          IP: 103.116.170.0/23
                          IP: 103.227.234.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174824 (0x2aae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  8 13:06:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:da:7f:8f:db:7b:b9:78:26:50:1e:31:9b:
                    2a:e1:bf:5b:c4:77:dd:d9:9d:53:1a:c3:92:39:36:
                    43:ed:42:ba:90:78:3b:23:03:3b:26:64:65:91:4d:
                    20:d5:c6:88:9a:66:68:9e:ec:ee:95:fb:c6:14:9e:
                    6a:9f:ad:c4:92:0a:20:01:64:1d:8a:cc:ed:3e:2e:
                    28:ed:6a:e2:7d:e3:cd:f9:87:59:cb:03:ec:0f:07:
                    fd:5d:d7:af:fd:d3:30:78:c1:0b:09:c0:15:33:23:
                    cd:85:7a:28:78:33:80:0a:da:67:eb:08:81:08:49:
                    55:7e:24:9d:ab:26:b4:77:6b:08:7c:62:8d:3b:c8:
                    75:85:4f:6e:f9:00:2a:f2:7c:18:41:6e:c0:3e:19:
                    c6:6f:4c:ff:fe:68:6a:91:0f:da:59:39:64:81:bb:
                    6f:73:7d:9f:f9:bb:8e:fc:93:48:25:d5:ff:ad:08:
                    e6:97:0d:83:52:60:e2:b3:28:5b:5c:4b:f0:c9:39:
                    04:60:16:f8:88:21:90:83:cc:9e:17:05:da:fa:26:
                    36:92:6a:5e:1a:64:7a:8d:bb:11:4b:e0:4b:c9:e1:
                    af:12:bf:2a:a5:e8:74:c2:ee:34:8c:4d:b8:d5:b2:
                    68:50:fb:7e:c6:1e:aa:9e:da:84:47:c7:1b:1d:c6:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133415

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.170.0/23
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:42:2a:23:06:47:c4:33:ff:d4:d9:ba:b1:ce:33:b9:88:14:
         10:32:bf:76:82:a8:a9:a2:25:28:28:db:e3:77:c4:b5:3f:43:
         b7:1d:04:f6:a8:73:c1:79:2f:6b:26:b4:fc:66:08:1f:1a:f4:
         17:51:99:a5:84:d9:16:38:8f:6d:2f:45:18:63:c3:7f:28:e2:
         04:89:be:ff:69:a8:43:a3:c8:da:04:2d:5c:5c:1e:f7:ad:fe:
         e6:57:cd:4e:c9:89:45:4c:9b:a3:14:5a:37:7b:d2:a9:3e:c8:
         c9:59:67:59:5a:10:08:b5:5e:2a:3b:29:0b:66:f0:02:d6:ef:
         97:55:0b:4c:f3:6b:42:f2:ac:71:40:53:af:59:f5:92:ce:f3:
         77:3b:91:da:00:15:b8:f7:c4:2d:cf:54:08:17:40:2d:ea:be:
         49:b2:c7:a4:49:1b:af:89:ca:a6:98:b4:ab:a3:61:01:ec:35:
         8d:bd:05:c5:83:57:69:9b:45:b0:a2:fb:6d:fb:b9:17:97:50:
         77:16:99:ea:5c:e9:6f:66:db:4d:59:9f:1b:51:76:e0:71:83:
         d0:f0:6b:f8:78:e9:33:92:bd:9a:27:5c:ea:d0:d6:7f:1d:5f:
         e7:f9:02:b6:67:92:87:18:28:35:78:76:3b:67:a0:7d:1f:1f:
         3c:a5:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:31 2026 by rpki-client