Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.cer (raw, json)
Hash identifier:          VZT+JiR8YYh4DXYDq4M7wTYYuJkRYPzRozkV6YsAYhE=
Subject key identifier:   40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB68
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jun 2026 13:13:22 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 142044
                          IP: 103.81.55.0/24
                          IP: 103.165.161.0/24
                          IP: 2001:df6:6d80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179048 (0x2bb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  5 13:13:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:50:0b:43:da:4a:5d:c7:4d:c9:92:d2:86:
                    2f:57:70:ee:42:43:62:f0:b7:fe:84:58:83:bc:49:
                    97:17:54:26:8b:49:8e:14:36:14:e2:ed:cc:e5:c1:
                    a4:37:97:1c:c4:da:f5:3d:3d:d8:e2:5b:2f:73:4e:
                    67:c6:10:76:2a:16:86:5a:ae:76:84:e8:c2:13:41:
                    d8:07:4c:c8:99:64:b4:85:f2:c0:d8:25:6e:c6:d1:
                    22:78:4b:e5:31:67:a0:c3:e5:e9:87:0e:24:eb:9c:
                    c2:f9:8b:01:49:a7:61:ef:6c:82:09:a4:be:51:87:
                    70:92:9d:c9:31:17:fe:fd:0b:6c:fb:39:b7:07:91:
                    d8:8f:8c:32:28:61:ec:ca:37:fb:63:22:ef:09:54:
                    9c:21:52:ec:1d:20:5b:91:69:e4:c3:6f:06:dd:bf:
                    41:59:e7:11:5a:0f:8c:87:03:0e:24:ee:fc:d1:b2:
                    83:5e:e8:ce:0e:da:00:04:39:07:c1:7f:3a:35:d2:
                    d2:69:e5:3f:5e:cd:15:dd:51:c1:02:90:41:ac:b5:
                    4d:95:0f:6d:d1:8c:f0:5f:fe:34:36:01:ff:00:13:
                    e3:15:af:6b:38:9c:7d:94:4c:9c:aa:a6:52:e1:49:
                    56:96:82:cd:80:8e:34:77:6f:8f:d8:01:11:b8:b3:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142044

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.55.0/24
                  103.165.161.0/24
                IPv6:
                  2001:df6:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:4b:b4:08:18:f2:c2:61:f9:8b:64:ca:e0:d9:d9:70:df:
         e5:c4:bd:e1:f7:9b:89:9a:e8:34:d9:89:ee:9d:6c:48:20:ec:
         f2:98:67:75:47:39:38:55:e5:02:7f:e3:fd:30:1a:69:4d:43:
         d7:f3:b5:ce:c6:53:47:28:f7:4f:6f:89:10:9b:d3:ac:49:26:
         4b:de:e2:25:2c:75:07:f2:71:af:10:36:a3:a9:9f:99:7d:dc:
         f5:da:05:d6:4a:bf:e9:c1:99:8f:06:01:59:f0:8c:9f:b2:f4:
         17:f7:56:f8:e0:c2:2f:31:e8:1a:1c:e6:0e:16:89:94:27:60:
         dc:d6:a3:48:0e:a4:5f:34:74:67:10:08:9a:01:c2:14:74:81:
         42:1e:88:5c:44:35:9c:36:44:1d:4c:19:55:af:a1:da:fa:f4:
         ce:24:cd:57:6a:a7:cd:60:0f:27:78:74:56:e4:9a:88:52:8f:
         b9:e2:bf:0a:70:70:09:b4:07:bd:8d:80:78:4d:a0:99:f4:b3:
         19:8f:ee:83:82:2e:cc:03:12:c5:9b:5e:6f:53:4a:b7:6f:09:
         5d:df:40:ac:37:8a:c2:05:d4:f1:c2:bc:63:0e:3a:dc:d9:f3:
         73:6b:96:72:e8:06:4e:f1:de:ff:5d:d7:9f:3c:22:fa:3b:6f:
         e2:62:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:32 2026 by rpki-client