Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.cer (raw, json)
Hash identifier:          NgdqIWZFaMAY9gS5wUGwPssAanb/e52Ur5q9MRYxp9M=
Subject key identifier:   12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BA88
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 14:43:08 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 103.218.96.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 12:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178824 (0x2ba88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 14:43:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:e2:d8:b6:0b:7e:47:cb:53:12:39:5a:30:
                    bc:d2:be:b3:83:d4:b4:13:f3:f0:25:fb:32:af:fb:
                    4e:51:c4:ca:c9:f7:55:b1:6e:58:79:a9:b2:45:97:
                    10:f0:44:2a:46:71:59:9b:68:57:e1:19:ea:90:36:
                    8f:ba:53:d7:bd:88:93:f2:32:49:23:42:13:95:7f:
                    ad:e1:df:6f:83:72:4b:3d:8c:6e:24:c5:07:f8:93:
                    e2:91:fd:22:ac:5d:ef:6f:3b:92:cd:78:d1:e0:ac:
                    a3:ef:5b:b9:bc:7f:39:ef:cd:9d:ca:2c:c4:f9:71:
                    96:d9:a4:a9:60:78:17:de:90:f7:c8:f9:3c:f2:4d:
                    87:7d:f7:52:0d:a2:e1:00:d8:34:01:76:ee:d1:8c:
                    e1:72:0d:83:be:e3:eb:d4:b9:e6:11:bc:04:1d:ac:
                    d5:05:f1:9b:de:52:67:ca:e2:68:65:52:7d:1e:5a:
                    7a:b1:b9:e4:10:19:cb:32:08:14:5e:03:d2:b6:45:
                    45:97:5b:8e:f7:d7:d9:e1:8a:0e:9c:08:a1:3e:79:
                    6d:7b:17:74:af:41:4b:b5:6a:56:f6:18:3c:a3:95:
                    64:e7:a4:8b:80:d4:31:b9:bc:4e:b8:75:53:da:cd:
                    02:57:2a:17:e4:f3:01:75:dd:eb:6a:a7:b4:77:9f:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:36:8c:66:da:03:1d:53:36:d2:f8:9c:37:09:8d:60:a3:b4:
         60:f4:50:16:f0:d0:82:b2:d4:bc:ee:d6:93:2e:3f:40:e1:60:
         1a:cc:ef:bd:c1:94:81:7b:34:d9:b9:be:fb:f5:16:89:0f:bb:
         4d:43:7f:b3:03:ae:55:c3:7f:ed:84:05:74:02:b0:5f:6d:c2:
         0e:b2:7b:75:cc:eb:98:3d:e2:9f:97:07:ba:b4:5a:32:23:b1:
         36:4f:13:2f:6d:2f:a1:e4:a9:83:e4:2b:54:55:22:a0:25:43:
         d8:0f:25:f6:73:bf:37:50:5e:4c:4d:1b:cf:cc:70:bd:0d:40:
         2d:5d:6e:2b:84:54:d4:46:15:23:3c:b4:32:ff:93:4c:05:61:
         d3:2f:7d:00:8c:e3:08:f5:f7:69:71:44:e7:c7:1b:09:37:aa:
         70:58:f2:f6:05:81:d0:6b:31:b8:d0:6d:36:1a:f4:00:1d:e9:
         6c:ed:1b:9a:df:11:99:7f:7e:a4:e2:58:5a:e8:ea:59:d6:54:
         08:b2:d7:77:f8:a7:d4:05:4d:eb:fe:fa:bc:bd:2d:39:c9:4d:
         04:c6:45:50:4e:06:03:96:2e:83:69:9c:e2:2d:7f:39:17:67:
         44:7f:eb:f2:d0:5d:2f:bb:63:ad:f5:a5:71:a7:14:75:44:84:
         1c:21:e4:93
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDArqIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwMzE0NDMwOFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMx
REJBQjQ5QTI0RDFCOUExNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9uuLYtgt+R8tTEjlaMLzSvrOD1LQT8/Al+zKv+05RxMrJ91Wxblh5qbJFlxDw
RCpGcVmbaFfhGeqQNo+6U9e9iJPyMkkjQhOVf63h32+Dcks9jG4kxQf4k+KR/SKs
Xe9vO5LNeNHgrKPvW7m8fznvzZ3KLMT5cZbZpKlgeBfekPfI+TzyTYd991INouEA
2DQBdu7RjOFyDYO+4+vUueYRvAQdrNUF8ZveUmfK4mhlUn0eWnqxueQQGcsyCBRe
A9K2RUWXW47319nhig6cCKE+eW17F3SvQUu1alb2GDyjlWTnpIuA1DG5vE64dVPa
zQJXKhfk8wF13etqp7R3n3wXAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUEqEC8I7R
T2I/puMdurSaJNG5oVEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJDMjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3
UlQySV9wdU1kdXJTYUpORzVvVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJn2mAwDQYJKoZIhvcNAQELBQADggEBAEI2jGbaAx1TNtL4nDcJ
jWCjtGD0UBbw0IKy1Lzu1pMuP0DhYBrM773BlIF7NNm5vvv1FokPu01Df7MDrlXD
f+2EBXQCsF9twg6ye3XM65g94p+XB7q0WjIjsTZPEy9tL6HkqYPkK1RVIqAlQ9gP
JfZzvzdQXkxNG8/McL0NQC1dbiuEVNRGFSM8tDL/k0wFYdMvfQCM4wj192lxROfH
Gwk3qnBY8vYFgdBrMbjQbTYa9AAd6WztG5rfEZl/fqTiWFro6lnWVAiy13f4p9QF
Tev++ry9LTnJTQTGRVBOBgOWLoNpnOItfzkXZ0R/6/LQXS+7Y631pXGnFHVEhBwh
5JM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:06:00 2026 by rpki-client