Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
File:                     HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer (raw, json)
Hash identifier:          Fu0h4CP5RB1Twx28aIV76uyUJw+O2MDV+2IUc/V4PmE=
Subject key identifier:   1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B4A7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 May 2026 12:56:15 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 137703
                          IP: 103.113.192.0/22
                          IP: 2404:5e40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 13:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177319 (0x2b4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 14 12:56:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:cf:0b:4e:70:d1:99:71:d0:1c:4d:46:99:
                    d1:5e:bb:0a:2c:c2:dc:2b:de:0b:27:94:d8:5f:1e:
                    53:11:80:c9:15:2d:e3:b1:4f:5e:af:c9:74:96:fc:
                    ea:09:d3:a4:85:10:27:9c:42:ec:0e:5d:da:0c:6b:
                    a5:fe:15:2a:d6:a6:d3:5c:cc:9f:af:18:f1:8c:14:
                    fb:16:60:a7:58:a7:44:19:23:80:52:43:ba:6e:19:
                    04:04:1b:06:34:31:3c:06:5b:13:09:5b:7c:95:47:
                    40:16:19:e6:75:ff:da:50:ad:3d:6f:c7:cd:bc:91:
                    33:d3:d8:d4:4b:ab:1d:a7:e6:a0:d9:5c:fe:df:53:
                    43:d8:3a:d6:5e:93:f5:a4:b2:15:56:28:af:70:9c:
                    d3:7a:d8:91:dd:0e:5f:07:69:54:6a:9f:a3:3c:c6:
                    69:b3:82:87:65:6c:fb:f5:01:1f:f8:1b:95:9c:07:
                    3c:12:69:10:60:f5:af:85:46:d7:e8:ae:28:64:c7:
                    a9:a0:d9:14:f9:51:e2:61:1f:23:32:bf:c4:5c:7d:
                    05:36:ba:4c:2b:b6:80:62:4f:13:39:92:d3:f6:a3:
                    3f:29:d1:0f:f3:95:0b:e7:e2:4e:46:e2:a0:72:74:
                    a5:60:c4:cc:7c:b2:56:8e:3b:f3:b0:2b:79:8d:5d:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137703

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.192.0/22
                IPv6:
                  2404:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:33:5b:84:87:36:b0:56:11:bb:2b:0e:4d:bb:44:55:19:81:
         23:7a:aa:4c:3c:09:17:6d:13:8d:bf:1e:bf:3d:54:d6:4b:1b:
         30:b9:08:7e:e8:cc:07:f0:88:cf:f6:ed:8f:40:4f:89:a2:fc:
         9f:9b:67:91:aa:46:c6:67:3d:e3:0c:e5:3c:d6:f3:07:88:09:
         d1:63:7a:2e:e2:24:33:43:a0:e5:52:ab:20:62:56:1e:16:1c:
         8b:ef:81:e3:5c:a2:b0:d5:f8:3f:63:c6:0e:48:b8:db:58:3d:
         b6:85:a9:24:f4:3b:23:94:df:29:11:61:9b:43:08:1f:67:50:
         8a:51:db:36:f8:2b:5d:e4:fa:46:82:6d:97:91:51:82:ad:c1:
         6f:26:09:2c:7b:7f:94:4b:0a:3e:c6:3f:e9:9d:ab:2b:36:09:
         9c:2b:82:37:49:84:73:d4:de:a3:fc:26:ba:2e:9d:f1:7b:8c:
         61:b8:2a:6e:26:86:48:c6:fd:e8:aa:a6:61:3c:23:62:47:94:
         82:cf:95:45:be:df:f2:22:b1:46:55:39:b0:1d:34:c6:f4:cb:
         c9:ce:6f:e9:d1:fe:55:4f:0f:bc:97:cf:ef:6c:77:4b:96:90:
         7b:7c:18:88:32:de:84:14:3c:a7:1f:d1:42:d0:a4:aa:1e:7e:
         0b:a7:2b:a6
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArSnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxNDEyNTYxNVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdD
N0NFMUNBOUY5QkZCNUZBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7ls8LTnDRmXHQHE1GmdFeuwoswtwr3gsnlNhfHlMRgMkVLeOxT16vyXSW/OoJ
06SFECecQuwOXdoMa6X+FSrWptNczJ+vGPGMFPsWYKdYp0QZI4BSQ7puGQQEGwY0
MTwGWxMJW3yVR0AWGeZ1/9pQrT1vx828kTPT2NRLqx2n5qDZXP7fU0PYOtZek/Wk
shVWKK9wnNN62JHdDl8HaVRqn6M8xmmzgodlbPv1AR/4G5WcBzwSaRBg9a+FRtfo
rihkx6mg2RT5UeJhHyMyv8RcfQU2ukwrtoBiTxM5ktP2oz8p0Q/zlQvn4k5G4qBy
dKVgxMx8slaOO/OwK3mNXf5jAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUHdcXsimT
YZDOtmfHzhyp+b+1+sQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNGNzIxLzY0NDI0MzdBNTNBQzExRUE5QUQ1NEIyRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2lt
VFlaRE90bWZIemh5cC1iLTEtc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhnnMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3HAMA0EAgAC
MAcDBQAkBF5AMA0GCSqGSIb3DQEBCwUAA4IBAQDUM1uEhzawVhG7Kw5Nu0RVGYEj
eqpMPAkXbRONvx6/PVTWSxswuQh+6MwH8IjP9u2PQE+Jovyfm2eRqkbGZz3jDOU8
1vMHiAnRY3ou4iQzQ6DlUqsgYlYeFhyL74HjXKKw1fg/Y8YOSLjbWD22hakk9Dsj
lN8pEWGbQwgfZ1CKUds2+Ctd5PpGgm2XkVGCrcFvJgkse3+USwo+xj/pnasrNgmc
K4I3SYRz1N6j/Ca6Lp3xe4xhuCpuJoZIxv3oqqZhPCNiR5SCz5VFvt/yIrFGVTmw
HTTG9MvJzm/p0f5VTw+8l8/vbHdLlpB7fBiIMt6EFDynH9FC0KSqHn4Lpyum
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:19:09 2026 by rpki-client