Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
File:                     MOWJKI62UAJRDId7Rmq-GXU7284.cer (raw, json)
Hash identifier:          j0n9Sa6E23hcndBgbYiQHHELLm4iCo1kV9AHt56vRFA=
Subject key identifier:   30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029405
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:17:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 38719
                          IP: 27.54.80.0/20
                          IP: 27.111.81.0 -- 27.111.84.255
                          IP: 27.111.86.0/24
                          IP: 27.111.88.0/23
                          IP: 27.111.92.0/22
                          IP: 27.123.24.0/21
                          IP: 27.124.112.0/20
                          IP: 43.245.52.0/22
                          IP: 43.250.248.0/22
                          IP: 103.250.212.0/22
                          IP: 103.253.193.0/24
                          IP: 103.254.136.0/22
                          IP: 112.109.74.0/24
                          IP: 112.109.81.0 -- 112.109.84.255
                          IP: 116.0.16.0/21
                          IP: 119.47.112.0/22
                          IP: 119.47.117.0 -- 119.47.119.255
                          IP: 119.47.122.0 -- 119.47.124.255
                          IP: 163.47.72.0/22
                          IP: 202.174.80.0/24
                          IP: 203.17.36.0/24
                          IP: 203.26.41.0/24
                          IP: 203.28.48.0 -- 203.28.50.255
                          IP: 203.170.80.0/21
                          IP: 2400:6d80::/32
                          IP: 2402:cb40::/32
                          IP: 2407:4c00::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168965 (0x29405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:17:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:ea:11:a6:ac:08:ea:a1:80:1c:49:50:69:
                    5a:1a:d5:90:0a:f2:e6:5f:6f:5f:e0:92:6c:93:6c:
                    28:0f:1f:84:82:f2:05:66:64:33:f3:40:5e:c9:ac:
                    3d:45:b8:27:b9:54:d8:47:61:8e:d5:3b:42:ca:95:
                    0c:e1:32:ef:59:b2:98:59:99:54:79:5b:0b:c0:0d:
                    52:0b:e1:b8:b8:56:cf:c9:20:7e:2d:fa:da:44:35:
                    7e:1a:4b:45:da:5a:bd:8f:13:0f:6e:5d:bc:50:71:
                    41:fd:05:81:25:fd:f2:f6:7f:d7:cc:a0:4b:cb:51:
                    ab:23:8e:f3:10:52:29:a1:eb:8a:c7:c3:24:2d:bc:
                    d3:b8:85:00:63:aa:26:c8:45:d3:09:af:fe:0e:32:
                    21:0d:64:85:a9:e3:7b:68:63:8f:24:5a:25:b7:8c:
                    5f:df:1e:84:68:e3:6b:2d:f3:f1:9c:c1:30:c8:1a:
                    29:c8:57:a4:89:91:2a:b6:7f:23:53:76:2e:ca:a8:
                    e8:94:6f:2c:1f:62:5b:95:af:29:11:b0:96:f9:3d:
                    e9:7f:4f:3e:32:48:bc:1f:38:3d:be:aa:12:7d:34:
                    2a:dc:b7:d1:97:45:4b:96:04:b7:5f:cc:07:98:0a:
                    14:6e:1d:eb:f1:43:6f:b1:22:ca:2e:c1:1a:68:d8:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38719

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.80.0/20
                  27.111.81.0-27.111.84.255
                  27.111.86.0/24
                  27.111.88.0/23
                  27.111.92.0/22
                  27.123.24.0/21
                  27.124.112.0/20
                  43.245.52.0/22
                  43.250.248.0/22
                  103.250.212.0/22
                  103.253.193.0/24
                  103.254.136.0/22
                  112.109.74.0/24
                  112.109.81.0-112.109.84.255
                  116.0.16.0/21
                  119.47.112.0/22
                  119.47.117.0-119.47.119.255
                  119.47.122.0-119.47.124.255
                  163.47.72.0/22
                  202.174.80.0/24
                  203.17.36.0/24
                  203.26.41.0/24
                  203.28.48.0-203.28.50.255
                  203.170.80.0/21
                IPv6:
                  2400:6d80::/32
                  2402:cb40::/32
                  2407:4c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:a8:94:43:da:aa:40:0c:7c:35:2f:a7:4c:0c:dc:47:b8:
         88:b1:44:ca:df:1b:da:e2:6d:3a:cc:11:9d:d3:af:52:4d:1a:
         a8:58:98:38:d9:9c:c9:6e:7e:d6:b0:a9:7c:78:49:8b:7c:c4:
         56:72:91:25:76:17:cb:db:8b:73:ff:23:1f:99:0f:83:bd:7f:
         9a:1f:ec:42:eb:e5:1c:bc:4e:92:43:41:35:89:f1:a8:f0:0a:
         b0:a9:66:36:52:d4:c1:9e:22:e2:fc:05:51:0a:e0:be:09:8d:
         72:16:d0:de:c4:05:00:a4:b9:34:05:91:9c:57:3f:86:37:c1:
         16:26:b0:1d:25:4d:17:3b:75:32:f3:1a:5d:48:4b:17:cc:ff:
         47:50:a5:77:3d:12:86:cf:09:89:00:59:c4:59:0f:f9:db:5f:
         0e:97:bb:b0:82:1c:83:f2:69:c5:36:2b:7a:b5:b0:08:cc:1d:
         28:17:a2:52:0c:77:f6:c0:c0:cc:ab:d5:b2:93:63:6c:5d:e7:
         fc:00:26:76:b8:fe:20:86:03:0e:3d:65:50:62:0c:cc:fa:d1:
         e8:4a:38:75:1e:1a:a7:63:78:46:66:26:9c:53:09:5b:93:f8:
         24:6b:0e:aa:ad:7c:8f:57:61:2f:9b:09:6d:f6:d6:b0:4b:90:
         2f:5e:24:c4
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIDApQFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMTc1MloXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3
QjQ2NkFCRTE5NzUzQkRCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCb2+oRpqwI6qGAHElQaVoa1ZAK8uZfb1/gkmyTbCgPH4SC8gVmZDPzQF7JrD1F
uCe5VNhHYY7VO0LKlQzhMu9ZsphZmVR5WwvADVIL4bi4Vs/JIH4t+tpENX4aS0Xa
Wr2PEw9uXbxQcUH9BYEl/fL2f9fMoEvLUasjjvMQUimh64rHwyQtvNO4hQBjqibI
RdMJr/4OMiENZIWp43toY48kWiW3jF/fHoRo42st8/GcwTDIGinIV6SJkSq2fyNT
di7KqOiUbywfYluVrykRsJb5Pel/Tz4ySLwfOD2+qhJ9NCrct9GXRUuWBLdfzAeY
ChRuHevxQ2+xIsouwRpo2C+NAgMBAAGjggPjMIID3zAdBgNVHQ4EFgQUMOWJKI62
UAJRDId7Rmq+GXU7284wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQzNzk0LzIwRkU1NjE2RTk4RjExRTVBM0REREM2NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2
MlVBSlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJc/MIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBvwQCAAEwgbgDBAQbNlAw
DAMEABtvUQMEABtvVAMEABtvVgMEARtvWAMEAhtvXAMEAxt7GAMEBBt8cAMEAiv1
NAMEAiv6+AMEAmf61AMEAGf9wQMEAmf+iAMEAHBtSjAMAwQAcG1RAwQAcG1UAwQD
dAAQAwQCdy9wMAwDBAB3L3UDBAN3L3AwDAMEAXcvegMEAHcvfAMEAqMvSAMEAMqu
UAMEAMsRJAMEAMsaKTAMAwQEyxwwAwQAyxwyAwQDy6pQMBsEAgACMBUDBQAkAG2A
AwUAJALLQAMFACQHTAAwDQYJKoZIhvcNAQELBQADggEBAI8NqJRD2qpADHw1L6dM
DNxHuIixRMrfG9ribTrMEZ3Tr1JNGqhYmDjZnMluftawqXx4SYt8xFZykSV2F8vb
i3P/Ix+ZD4O9f5of7ELr5Ry8TpJDQTWJ8ajwCrCpZjZS1MGeIuL8BVEK4L4JjXIW
0N7EBQCkuTQFkZxXP4Y3wRYmsB0lTRc7dTLzGl1ISxfM/0dQpXc9EobPCYkAWcRZ
D/nbXw6Xu7CCHIPyacU2K3q1sAjMHSgXolIMd/bAwMyr1bKTY2xd5/wAJna4/iCG
Aw49ZVBiDMz60ehKOHUeGqdjeEZmJpxTCVuT+CRrDqqtfI9XYS+bCW321rBLkC9e
JMQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:26 2026 by rpki-client