Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
File:                     M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer (raw, json)
Hash identifier:          lp1AKVUrTIJIZxTCqn0PgnaHhU20JV9vXf/oFP8VlFE=
Subject key identifier:   33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C743
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 24 Jul 2026 14:27:23 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 149872
                          IP: 203.4.164.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182083 (0x2c743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 24 14:27:23 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:6e:90:4a:1f:3e:20:ff:ec:f4:f7:3e:1a:
                    fa:9b:b7:57:3e:7b:a1:54:62:02:b9:9e:17:ab:25:
                    81:f3:de:eb:3c:31:40:ca:35:09:e0:b6:67:74:f0:
                    89:3a:f1:dc:b0:28:c9:cf:bd:b8:2c:91:82:ae:cb:
                    fe:d5:6a:18:37:16:a7:11:a5:1d:dc:50:18:d4:a0:
                    6e:1b:23:86:90:41:f2:6f:f4:ea:53:e9:7b:2e:70:
                    b8:8a:14:ed:46:be:ca:85:a0:21:0c:02:d4:9e:40:
                    9c:d5:74:d2:c4:1c:46:e3:c4:f6:3c:33:d0:ec:14:
                    4e:d8:d2:77:0d:c3:8a:3c:a6:42:b6:82:91:24:5e:
                    75:b9:4c:e9:02:20:25:e9:a7:fc:81:0c:f9:51:9a:
                    fd:2a:64:47:4b:85:4b:c8:c1:46:9f:d4:0c:a0:f2:
                    08:0d:6e:80:df:cd:a9:5b:05:93:33:e1:b5:4c:c1:
                    49:5d:9f:e2:d9:ba:34:7c:6b:af:9a:79:30:4f:bc:
                    75:f4:83:6a:40:d8:fd:2e:9e:08:10:40:ff:c6:85:
                    5c:b2:d3:46:f7:b9:34:f2:25:0f:ca:38:25:4d:39:
                    45:8e:21:2b:d1:9f:a2:60:2b:30:87:e4:d9:aa:31:
                    aa:33:9e:de:09:7a:42:b6:2e:8f:bb:67:78:02:1d:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149872

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:27:54:3b:d0:5f:2b:4b:46:10:75:c0:be:70:02:3f:a3:
         8b:40:5f:bd:8f:b5:c2:65:3c:15:7f:47:f3:a5:42:99:ea:6d:
         38:12:56:02:c4:b5:d8:66:cc:13:a6:02:f5:c8:81:a5:f4:40:
         6b:eb:99:09:56:f6:75:b6:7c:f8:e2:10:3f:03:a8:d3:82:22:
         3d:5f:71:0f:9e:0d:cd:4d:c3:67:e3:48:f1:04:5d:a4:15:aa:
         a8:f7:a9:f2:62:b6:30:20:d8:bf:05:fa:4d:d4:d3:a9:ac:2e:
         6a:ad:b4:45:67:cb:bb:b1:f6:b6:fb:13:de:05:14:7f:00:ad:
         18:8c:de:08:37:f9:a7:3c:75:34:75:04:33:c7:3f:6d:32:a1:
         82:19:87:4f:52:f4:d2:6d:4f:81:27:79:00:23:be:75:8c:71:
         1c:5a:71:e2:3d:92:bb:bf:34:51:93:ab:94:52:56:df:63:95:
         d9:45:dd:29:94:16:31:52:08:7b:c4:aa:f9:11:e2:e6:b0:04:
         88:db:88:b7:a7:70:23:a7:28:ba:8b:7c:f1:d8:1a:0c:91:29:
         3b:21:8c:77:d4:c9:84:64:6a:9f:37:f7:bc:bb:c7:e3:f1:03:
         83:f4:e0:b0:c0:90:99:cd:a1:81:22:96:94:5a:52:c3:69:f0:
         da:d4:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:00:57 2026 by rpki-client