Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
File:                     M_QIIWaon_9vMmrgm0S_vvFin-s.cer (raw, json)
Hash identifier:          O9Z6ci5yqDItvwphrPutHdh0pyMDrtvhLkziiYdRlF8=
Subject key identifier:   33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB17
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A91905300000/9/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Thu 04 Jun 2026 14:07:08 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 9913
                          IP: 103.233.208.0/22
                          IP: 202.14.148.0/24
                          IP: 203.0.80.0/24
                          IP: 203.1.68.0/23
                          IP: 203.31.110.0/23
                          IP: 203.57.23.0/24
                          IP: 2400:9c20::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178967 (0x2bb17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  4 14:07:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:0a:5a:80:2d:26:c2:12:25:bf:aa:bd:bd:
                    37:3b:73:29:21:0c:ad:f5:87:37:ea:ea:3c:35:a5:
                    6c:0b:f9:3a:9a:2f:94:08:a6:54:7c:21:62:59:56:
                    41:27:96:ee:20:1b:64:3f:35:f9:94:43:80:04:16:
                    b8:2a:a4:94:35:c8:d2:cf:14:4c:6f:4a:bf:6b:a6:
                    0c:9a:69:c0:ec:56:e0:95:72:4c:e5:82:0c:43:f2:
                    79:a3:a0:bf:7d:e5:4a:ee:57:25:1c:08:1c:49:8f:
                    3e:bb:34:d8:a5:09:a4:c9:ab:8f:28:47:bf:55:a8:
                    46:b7:49:c8:f2:a1:87:bc:28:71:bf:0d:95:76:29:
                    4d:fb:1a:2b:3e:82:5a:0c:3d:33:81:a2:28:93:62:
                    c0:01:ab:4b:6e:e5:47:0b:6f:3f:bd:63:4a:f8:ed:
                    e0:91:c1:9a:69:97:4e:3f:00:28:e2:5b:54:cd:c5:
                    67:d5:1c:ae:4c:b8:9b:ec:42:22:8c:6d:01:5a:1d:
                    23:a2:83:8b:11:61:d1:c8:b3:08:00:67:a5:15:84:
                    e2:cb:d5:01:89:b4:40:ca:5f:02:58:8e:64:b5:86:
                    c9:f1:4b:23:54:e6:c9:e8:cd:91:6e:88:fb:54:62:
                    55:32:f8:8d:77:dc:11:6d:8d:98:59:c3:7f:3e:d7:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9913

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.208.0/22
                  202.14.148.0/24
                  203.0.80.0/24
                  203.1.68.0/23
                  203.31.110.0/23
                  203.57.23.0/24
                IPv6:
                  2400:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:90:ac:21:8e:90:84:e7:c0:60:94:73:b4:69:68:e7:49:40:
         5b:f7:ad:34:c7:43:80:09:fc:a6:a0:3c:fc:4a:e3:ce:75:3a:
         bf:3f:93:93:78:ff:13:21:34:ba:65:8c:76:2f:10:6a:fb:69:
         f4:d8:18:5b:8a:a8:67:32:d4:f7:ba:a6:18:17:46:2b:ed:27:
         38:07:2a:31:4e:ba:80:22:61:56:51:39:3e:8b:a9:a5:85:55:
         65:51:5a:b3:d2:18:fc:b6:0d:fc:e7:89:9d:a5:5d:dc:53:9b:
         60:ec:78:ce:95:0b:77:d7:41:77:15:31:ff:a8:4b:18:2f:25:
         5c:cd:72:74:21:64:bf:12:00:bb:05:9f:79:1e:8f:16:6a:7a:
         3d:ad:58:e9:9a:f0:be:d7:7e:3d:6e:55:f7:83:1e:91:44:26:
         e2:16:cd:cc:d9:5b:75:d6:99:73:4c:69:3a:b0:e6:3a:1b:2c:
         8e:5d:cc:cc:1b:97:ea:60:f3:38:61:f5:70:39:32:01:d5:7c:
         18:9d:1a:74:6c:b9:5d:e2:51:1c:1b:7b:f0:28:fd:a9:d5:16:
         4e:b5:5f:34:44:fc:bc:e6:3a:0f:5d:c5:60:5e:32:35:20:d5:
         3b:33:a9:d2:be:8b:44:e3:94:bb:6a:95:6f:09:2c:40:6f:a2:
         67:28:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:03 2026 by rpki-client