Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FRpBvuFVH5ZkABsZNl8-CfDUwws.cer
File:                     FRpBvuFVH5ZkABsZNl8-CfDUwws.cer (raw, json)
Hash identifier:          Z8MTP2Q+UAQukyirAtzNUvluA0bwPAFwH396ctVjdzk=
Subject key identifier:   15:1A:41:BE:E1:55:1F:96:64:00:1B:19:36:5F:3E:09:F0:D4:C3:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D39D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915FE2E/C74858CAA01B11F1892500316F11F970/FRpBvuFVH5ZkABsZNl8-CfDUwws.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915FE2E/C74858CAA01B11F1892500316F11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 03 Sep 2026 09:27:23 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 58698
                          IP: 203.10.90.0/23
                          IP: 203.11.110.0/23
                          IP: 203.12.122.0/23
                          IP: 203.12.128.0/24
                          IP: 203.19.150.0/24
                          IP: 2405:1300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185245 (0x2d39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  3 09:27:23 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A915FE2E, serialNumber=151A41BEE1551F9664001B19365F3E09F0D4C30B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:1c:b5:da:10:f1:67:8f:26:6e:e7:6a:5b:
                    7c:7c:19:31:6f:78:3d:d3:5e:d6:09:0c:5e:dc:68:
                    88:e3:92:64:8e:2f:4f:2e:43:95:65:fe:6a:ad:c9:
                    56:e3:b3:e7:c0:35:d8:a7:e2:ff:8e:3a:72:9f:db:
                    4e:f4:e4:41:9f:7a:d8:83:b5:3a:a2:e2:34:86:00:
                    7c:98:94:fa:d2:2f:c3:d5:b2:11:1c:57:89:d1:8a:
                    a1:8c:8d:17:72:46:3a:e0:23:a9:84:3c:3d:d5:0b:
                    ba:7a:d4:f9:81:fc:9f:81:06:e9:14:37:4c:38:5c:
                    77:8d:69:87:19:7a:89:e5:5d:6a:33:35:39:2a:6b:
                    a1:f7:1c:fc:89:3f:bd:cc:23:6e:c3:47:05:08:42:
                    b4:14:54:2f:b8:4c:e7:77:e3:37:7f:31:22:32:f9:
                    96:09:69:cb:ca:97:0d:b1:ae:4a:80:86:ea:27:ba:
                    98:1e:82:4c:0f:98:bd:be:4a:f0:11:ef:b8:33:24:
                    fc:24:11:c8:2f:b8:2b:50:58:3c:0a:0c:be:8d:61:
                    26:cf:a8:69:53:f2:77:94:84:79:4d:88:70:56:9b:
                    2f:7e:f7:69:f9:b7:e3:8e:3e:50:64:20:ae:c0:5c:
                    68:b7:f5:59:fe:37:f9:09:c4:fe:0b:5d:4c:76:4e:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:41:BE:E1:55:1F:96:64:00:1B:19:36:5F:3E:09:F0:D4:C3:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/C74858CAA01B11F1892500316F11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/C74858CAA01B11F1892500316F11F970/FRpBvuFVH5ZkABsZNl8-CfDUwws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58698

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.90.0/23
                  203.11.110.0/23
                  203.12.122.0/23
                  203.12.128.0/24
                  203.19.150.0/24
                IPv6:
                  2405:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:95:dd:c3:54:30:70:0d:5c:85:89:67:d2:ce:48:0e:7f:18:
         de:74:8a:54:96:e1:fc:50:a6:d3:69:e9:ad:e9:8b:cf:c1:d7:
         59:13:7d:a5:a8:2d:c9:e3:16:5f:39:48:3e:ef:9f:cc:5f:6f:
         61:15:b7:e8:38:e4:f0:63:25:0e:ed:9a:14:31:fb:38:2c:8a:
         bc:02:77:5e:cb:66:db:7a:4d:b0:12:8d:1f:fa:a0:25:0f:f7:
         40:8b:2e:60:f7:94:64:a1:23:00:72:4f:2f:c2:ee:94:de:71:
         08:fd:b5:11:65:3c:c1:8c:53:51:5b:f4:cb:50:4b:8c:6a:65:
         46:f3:7f:53:74:20:e6:25:47:ef:e5:c0:55:6a:45:32:e7:b3:
         96:e5:e4:0f:b6:6a:35:36:01:7b:3c:92:ca:91:0a:61:25:0c:
         1e:05:7a:c9:6e:76:ce:ec:9f:37:a1:4d:42:60:1c:0b:43:08:
         dc:60:ff:ab:3d:37:ab:f3:25:49:a0:06:9f:76:fa:0f:fd:8e:
         91:01:96:38:bb:60:7a:60:e9:15:97:d5:fe:0b:c8:c3:e6:00:
         c2:28:fe:74:8d:21:5f:43:df:d7:ed:d2:38:b8:26:bd:b3:7d:
         aa:2c:41:34:46:c0:c9:59:b8:d5:93:1c:ee:e6:db:19:83:6f:
         07:d3:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:02 2026 by rpki-client