Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
File:                     JcIFLO89jt7xrjiFX-f7EbRXgRU.cer (raw, json)
Hash identifier:          gyVX+1RnsOh6eizajzrU86kS5nbPxDVJx1IgfxPzyic=
Subject key identifier:   25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C7AC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 27 Jul 2026 13:12:34 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 137903
                          IP: 103.116.211.0/24
                          IP: 2001:df5:7f00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182188 (0x2c7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 13:12:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:8f:3d:99:b7:56:14:8e:39:51:74:74:99:
                    5f:6f:38:18:70:f2:d4:ca:e2:fb:c7:8a:1d:ab:b7:
                    16:6f:cd:25:88:65:69:f7:89:1a:85:c0:e6:60:84:
                    bc:00:b0:a6:c7:7e:16:42:83:c1:93:b0:46:dc:33:
                    d2:51:db:94:a7:30:25:16:1b:7e:30:45:4a:82:df:
                    94:5d:df:f0:0c:2c:f3:e1:ca:5d:8f:62:af:69:e5:
                    ea:76:79:68:93:8b:c3:8b:9a:63:45:a7:32:af:4b:
                    21:a9:74:18:93:22:13:42:67:a7:f8:db:72:73:77:
                    ff:c0:e6:0d:5e:da:93:48:21:63:1e:19:73:9e:1a:
                    a9:bf:6a:c0:95:c9:0f:a4:33:e9:ba:8a:96:23:c5:
                    de:d3:0d:aa:11:bd:71:4e:23:48:ea:89:a4:2d:f1:
                    64:23:6f:5a:96:08:73:8c:86:50:c4:06:f5:bb:4c:
                    20:4c:32:09:37:0d:83:11:47:c2:b8:b7:be:f8:cc:
                    01:10:bb:10:a2:48:78:85:69:b7:b3:b2:d7:2f:0c:
                    db:c1:ca:e3:38:c1:cf:df:a3:dd:fa:62:01:3f:ef:
                    9c:d2:95:fa:c1:82:6a:a4:60:d1:36:ee:1c:67:7d:
                    e7:66:ed:43:f6:c3:54:8a:fd:fb:3c:37:11:27:a6:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137903

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.211.0/24
                IPv6:
                  2001:df5:7f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:6d:6c:2c:d3:4a:bd:49:62:0e:13:8c:c8:67:e9:db:a7:14:
         6a:f3:c6:d6:bd:44:6d:ce:af:ff:4b:56:d4:e5:60:69:6c:a3:
         7c:a8:ef:62:1f:66:ea:fc:6f:f1:60:67:ef:1a:7c:a7:b1:22:
         17:f8:05:48:f6:3a:6a:5d:c1:bb:78:59:26:14:32:a7:bb:10:
         a3:81:9b:e7:fd:2b:6d:38:47:36:3f:91:10:5c:c2:a6:61:7c:
         e6:bc:a8:21:85:0b:99:a1:49:be:dc:fb:5b:49:8f:14:02:ae:
         5c:7b:19:2f:c3:71:36:5a:a0:b3:eb:1f:d3:f1:21:d6:88:61:
         cc:c6:a5:19:e3:6e:27:ad:ac:f1:ac:2e:da:4b:77:bf:e9:e1:
         2d:4d:27:62:ff:fe:f0:c1:30:0a:14:8c:28:18:c3:3e:9b:97:
         ae:a2:51:97:10:4f:4f:4f:a9:c8:16:3a:30:58:ad:39:b5:bb:
         67:5d:ff:f9:fb:96:c7:2c:2e:b7:a9:3d:d5:16:1f:db:96:0a:
         b3:4e:18:d1:a4:6b:02:69:1f:36:8d:45:ca:e3:dc:94:05:a0:
         1d:b0:16:66:b5:3a:59:8d:a5:ab:73:e4:10:f3:92:e6:72:11:
         f2:47:1b:ab:f3:e0:fa:e5:45:29:cc:e9:18:3e:cc:8c:22:b6:
         f3:83:5e:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:04 2026 by rpki-client