Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
File:                     RUCi-buGGfZIYtCWyEyTjoivPGw.cer (raw, json)
Hash identifier:          5YVk1NFXBGlxqbFZPmZQAg1EjSU/7sEDagmNw7AJ6E8=
Subject key identifier:   45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C25E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 02 Jul 2026 14:59:54 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 103.215.230.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180830 (0x2c25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  2 14:59:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:29:4b:22:5d:00:e0:d4:a7:42:79:a3:a2:
                    c7:ba:0c:26:46:bb:b7:a3:d4:5f:dd:f6:be:ab:28:
                    31:71:89:c4:05:6d:68:fd:59:59:d3:43:6e:a4:a4:
                    64:7c:1a:a5:ae:11:37:61:0e:e1:cb:cf:28:6a:1c:
                    28:87:0d:7c:31:c4:f5:fd:cb:54:a1:c1:1c:56:f6:
                    33:c6:e5:da:8c:d5:cf:ac:80:a1:ec:5a:37:53:17:
                    f5:c8:02:0b:85:65:a4:f4:e5:3e:48:be:f7:68:01:
                    b8:8b:3b:1a:4f:0f:78:ec:de:fa:d6:e6:55:6e:6d:
                    b2:ac:d2:5d:ad:b6:89:66:c6:85:db:80:b3:46:21:
                    1a:c6:f9:1a:8a:0f:7e:01:88:cb:b3:7b:5a:9a:3d:
                    23:69:b6:5a:13:4f:c7:90:fb:4a:01:a4:36:9f:57:
                    fb:2f:c3:de:93:6d:89:de:fe:ab:40:9a:4e:63:3a:
                    e8:10:24:01:36:70:91:0a:38:b7:23:14:1b:f1:a8:
                    95:c6:26:ba:75:c2:c2:14:04:38:07:fb:5a:db:27:
                    38:2b:ab:11:41:c8:1c:ca:ae:55:03:6b:f7:11:57:
                    aa:ce:09:5e:e8:d6:41:24:6b:db:13:ca:0f:26:4d:
                    18:0c:79:2c:e2:a3:84:89:96:00:c6:0b:9b:a2:a2:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:62:48:49:18:3b:2f:65:60:34:0d:09:a1:8a:86:e6:13:
         15:16:4c:d4:8f:80:21:7c:fb:9f:34:3e:04:76:01:e3:e0:db:
         ee:5d:8e:94:e0:61:53:e9:d3:bf:ab:5d:61:a3:21:50:c6:ef:
         5a:47:2c:97:69:c8:50:aa:9c:72:60:25:45:eb:67:87:85:28:
         eb:89:87:23:73:03:43:8b:df:58:e3:43:67:52:cd:e2:54:06:
         a3:e7:0b:29:50:1a:71:12:79:0f:93:b2:51:49:c7:1d:fd:c6:
         8a:bf:68:e9:8c:6d:f3:81:11:b3:03:af:4d:15:d6:54:ff:de:
         a5:b1:12:a7:07:14:b5:db:c1:4e:b4:44:34:9e:fa:41:60:88:
         ce:a8:1e:25:f9:99:9e:2b:4a:15:6f:5b:f9:4b:74:63:e5:3a:
         96:79:d8:7c:ad:8c:68:b6:c1:5c:82:fc:a3:df:e4:54:98:22:
         95:11:d3:21:ac:79:11:26:7a:ce:c6:00:cf:5f:af:e1:85:81:
         e5:4c:ea:b4:b7:26:16:45:65:30:28:12:f7:ed:c0:10:c1:cc:
         1a:3e:97:bb:fc:09:a6:21:73:df:4f:ef:ec:e7:2c:6d:f4:d2:
         59:3e:09:2a:6a:07:0a:4e:03:8c:91:65:ee:3a:bf:51:e2:d6:
         85:b9:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:24:23 2026 by rpki-client