Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
File:                     EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer (raw, json)
Hash identifier:          XLh09AMuiGwCVRVL8LHDp/a4w56IQgp18JP9JzI1IbI=
Subject key identifier:   10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       025716
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 22 Jul 2025 14:39:11 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    AS: 151403
                          IP: 103.221.66.0/23
                          IP: 2401:aa0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153366 (0x25716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 22 14:39:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:ea:08:a1:7a:6a:41:1a:5a:2d:3c:2d:6a:
                    60:28:f8:34:43:72:b6:b7:7c:b9:54:61:fc:ec:47:
                    a7:0f:23:a9:b9:ec:2c:03:93:37:35:77:4c:e9:68:
                    5e:bf:d2:15:cd:bc:c5:f2:53:73:c5:c2:2d:c7:af:
                    f3:4f:82:a4:b1:84:66:e8:be:38:7b:b2:12:e4:b4:
                    4b:fb:0e:c2:11:41:03:61:64:1d:b3:5c:ba:f7:df:
                    e1:be:3a:d2:48:e0:24:d1:5b:8b:4d:8d:b6:e1:e3:
                    03:ef:04:06:d7:1a:ed:70:58:61:19:c8:0d:a5:62:
                    6a:05:c6:84:76:16:2f:ba:a2:db:7a:84:18:44:bd:
                    4d:06:e7:16:9a:7c:99:6f:c7:10:40:54:5d:a3:7e:
                    6e:e7:5f:69:4d:81:c1:b9:7e:61:1e:72:23:0a:08:
                    87:20:a3:5f:80:a7:67:43:f4:24:bc:e9:46:f6:47:
                    88:7a:c2:f6:6c:db:a7:0d:10:1a:83:ca:aa:c7:cd:
                    64:4b:38:f5:9b:b7:19:54:25:6a:74:9f:ef:ca:48:
                    ef:3f:ac:c1:60:9d:5e:6f:b2:94:2a:10:41:d2:cc:
                    38:f1:a1:1d:90:07:35:30:d1:0d:83:62:3e:a9:37:
                    be:73:e1:2a:31:4e:dc:df:5d:c9:da:b5:60:19:a5:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151403

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.66.0/23
                IPv6:
                  2401:aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:ef:41:eb:63:09:b3:38:17:17:55:aa:d1:77:0d:70:35:
         4d:e2:17:bd:94:c8:db:f0:fe:e9:54:1f:31:78:4e:2a:a1:e4:
         81:f8:83:3a:aa:ba:68:ff:14:3d:6d:5d:02:fd:0a:8c:f4:dd:
         09:dc:20:f1:bb:62:25:72:45:f0:5e:9b:c5:81:1f:cf:90:f2:
         cd:8f:5e:cb:bb:b3:4e:3a:bf:a4:64:f6:fa:32:b4:75:0e:cd:
         7a:56:e9:c0:f7:19:3c:ed:16:e9:f7:6b:00:1a:06:51:b1:f6:
         45:eb:62:2a:54:fb:6c:79:63:89:3a:d3:7e:8b:a3:e1:a6:d1:
         1e:79:25:b5:88:1b:03:45:9b:c2:08:06:47:70:d5:c5:a8:5f:
         96:c4:97:27:c7:fb:a4:33:f6:15:ff:cf:96:da:4e:04:65:d0:
         2a:54:96:51:f3:ca:75:88:de:1e:17:38:c0:1e:7f:9e:58:d1:
         d9:be:c1:c5:4c:99:ce:ad:fc:72:3b:b1:ba:cd:37:c0:cd:3e:
         3e:d0:4a:bc:68:36:5f:96:8d:d0:af:ec:ce:48:b7:af:5a:76:
         99:2a:ba:db:d5:1f:b2:05:63:34:30:ca:6e:75:e3:7e:1b:1a:
         e8:27:cf:61:50:52:8a:77:56:ad:d7:5b:59:3c:73:14:a7:56:
         a4:e2:69:64
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAlcWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcyMjE0MzkxMVoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4
OUZBNjVENjVGRTIyRTFGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJruoIoXpqQRpaLTwtamAo+DRDcra3fLlUYfzsR6cPI6m57CwDkzc1d0zpaF6/
0hXNvMXyU3PFwi3Hr/NPgqSxhGbovjh7shLktEv7DsIRQQNhZB2zXLr33+G+OtJI
4CTRW4tNjbbh4wPvBAbXGu1wWGEZyA2lYmoFxoR2Fi+6ott6hBhEvU0G5xaafJlv
xxBAVF2jfm7nX2lNgcG5fmEeciMKCIcgo1+Ap2dD9CS86Ub2R4h6wvZs26cNEBqD
yqrHzWRLOPWbtxlUJWp0n+/KSO8/rMFgnV5vspQqEEHSzDjxoR2QBzUw0Q2DYj6p
N75z4SoxTtzfXcnatWAZpbIHAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUEDbB4P/h
z8N9ZV2J+mXWX+IuH3owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4M0YwL0RDRkNBNkEyMEE4MzExRUU5RTZBOTI1MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzODNGMC9EQ0ZDQTZBMjBBODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBf
aHo4TjlaVjJKLW1YV1gtSXVIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk9rMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ91CMA0EAgAC
MAcDBQAkAQqgMA0GCSqGSIb3DQEBCwUAA4IBAQATo+9B62MJszgXF1Wq0XcNcDVN
4he9lMjb8P7pVB8xeE4qoeSB+IM6qrpo/xQ9bV0C/QqM9N0J3CDxu2IlckXwXpvF
gR/PkPLNj17Lu7NOOr+kZPb6MrR1Ds16VunA9xk87Rbp92sAGgZRsfZF62IqVPts
eWOJOtN+i6PhptEeeSW1iBsDRZvCCAZHcNXFqF+WxJcnx/ukM/YV/8+W2k4EZdAq
VJZR88p1iN4eFzjAHn+eWNHZvsHFTJnOrfxyO7G6zTfAzT4+0Eq8aDZflo3Qr+zO
SLevWnaZKrrb1R+yBWM0MMpudeN+GxroJ89hUFKKd1at11tZPHMUp1ak4mlk
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:32 2025 by rpki-client