Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
File:                     IqsnKH1FJndu9FfIiq4NTcomll8.cer (raw, json)
Hash identifier:          97oENHJsrHJWAdmjj1vI1ETY1xL8BnDTvh+KT9ZFcB8=
Subject key identifier:   22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BC0E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 07:30:14 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132625
                          IP: 103.186.160.0/23
                          IP: 2001:df0:abc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179214 (0x2bc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  9 07:30:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:4b:22:4b:8c:90:f0:1b:57:ed:40:f8:0c:
                    70:b5:25:e2:e9:98:ff:d7:24:90:59:34:f4:76:ce:
                    07:1b:5a:14:28:89:e6:ad:7f:5a:1f:f4:52:0c:2e:
                    20:8c:fe:9c:8e:4a:4f:14:da:c8:2b:fb:5e:21:09:
                    e7:cd:be:60:b5:e6:35:10:91:ba:cb:04:ce:9b:b6:
                    de:b0:bf:11:c6:9a:62:8f:08:86:43:f1:05:da:4b:
                    16:bd:da:62:68:42:29:36:41:da:68:48:8d:ad:2c:
                    a6:e9:fb:f9:3b:e2:20:ca:58:4d:f7:50:86:2e:f8:
                    cd:d5:4a:23:4a:62:6d:e2:89:f6:b5:e5:47:aa:c6:
                    a0:c9:39:70:78:ce:36:39:fe:af:76:02:de:2e:bf:
                    d9:b2:b2:5e:1d:a2:f2:b7:8a:e7:aa:c9:8d:6c:d5:
                    90:a4:91:8f:0e:d2:fd:41:7e:f6:9b:de:68:35:2f:
                    f9:8b:a4:0b:8a:e9:e6:ba:d4:50:c3:d8:dc:36:14:
                    99:0c:3d:b1:c6:23:5c:79:4f:ce:81:c6:db:19:ff:
                    61:62:77:97:5f:1b:f5:90:0b:90:aa:49:b7:21:e5:
                    0c:e2:3b:33:58:be:e3:b6:26:9f:99:4e:4e:69:99:
                    de:06:0e:38:f8:6c:dc:a7:30:a4:81:5d:fc:65:4d:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132625

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.160.0/23
                IPv6:
                  2001:df0:abc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:0e:79:16:08:a5:a0:28:6a:2a:06:c8:e8:73:70:87:60:a8:
         82:07:e6:51:1c:9e:85:05:73:e8:61:56:d4:67:d0:78:50:5e:
         58:80:b4:2f:09:00:5f:cb:63:45:ed:9a:13:72:4e:be:70:0b:
         7a:a1:02:9e:1a:e9:2b:fd:c7:83:5b:91:9a:d1:b2:3f:62:92:
         d5:43:73:ab:43:4e:38:f1:37:5e:68:cf:4e:3c:ac:a5:ad:68:
         ce:27:18:18:f1:66:ab:f5:4d:3b:fd:1e:be:ce:4d:6b:91:01:
         a3:33:1c:c8:d5:3f:67:a6:a8:f2:f6:89:96:fa:6e:b2:42:e3:
         09:c1:f6:e6:81:78:30:a1:55:43:e0:5f:54:31:03:ed:8a:18:
         77:3c:a8:e9:ac:a2:59:d7:79:22:ce:7e:03:a4:97:27:35:b6:
         ca:a0:e2:f7:32:5d:ce:2d:87:35:d0:43:19:79:dc:65:b4:27:
         c8:04:40:a1:d1:7d:3c:39:22:6b:13:a8:8a:4c:c5:90:28:f0:
         ad:20:13:92:6a:57:f2:95:33:06:85:71:12:f0:7b:43:46:f0:
         60:46:b6:9c:a7:15:7b:70:8d:81:28:3d:3e:6b:5d:0b:ce:06:
         1e:51:f2:84:d9:bd:78:77:5b:f2:79:2c:94:2f:6d:1b:26:01:
         86:9b:86:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:20 2026 by rpki-client