Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
File:                     SkhXfqTVPPBfDXTKwBD2q8QVI48.cer (raw, json)
Hash identifier:          4r3yD68oi18+B1PMQxbYa5pd6Wdu6isJcWuJaq4Bfig=
Subject key identifier:   4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C606
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 14:11:17 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 132343
                          IP: 103.13.178.0 -- 103.13.180.255
                          IP: 2001:df0:2e3::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181766 (0x2c606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 20 14:11:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:0d:ba:67:97:5f:8c:92:d1:f9:f3:f2:d6:
                    bd:a9:fe:6e:05:a2:b3:51:0c:6c:ff:62:f7:c5:a0:
                    96:86:e2:5c:55:88:41:46:13:ec:a1:78:8e:f5:97:
                    6b:e6:51:70:2d:df:72:dd:ca:65:71:2b:cc:9b:06:
                    d9:0d:66:66:02:d8:76:22:bc:34:42:9d:9d:1a:12:
                    64:3e:6f:29:ff:8c:2f:d8:35:15:a3:b4:83:47:1a:
                    46:8b:2d:80:88:36:c9:49:2b:44:1a:f8:82:70:41:
                    01:62:d0:f3:6e:14:bb:7e:e3:53:b3:f7:bb:66:5c:
                    8d:e6:ea:57:55:cc:9e:75:5a:d4:a6:60:84:cd:14:
                    f8:3a:31:6e:fe:7a:03:37:23:7d:42:25:74:70:f3:
                    f0:99:9c:d5:97:b3:8b:b2:c2:08:3a:71:df:a2:15:
                    45:fe:e3:39:8d:08:5e:73:c2:d9:22:8e:5c:f9:a3:
                    47:f8:1c:3d:aa:af:91:b2:d7:63:b5:e0:75:b0:2f:
                    63:9f:4e:06:82:9c:53:8f:62:6c:e4:91:6f:f5:eb:
                    4a:c9:36:69:47:5c:1a:96:c3:0d:29:6d:0c:54:50:
                    b3:30:09:b1:07:e0:88:05:0d:b5:a5:84:4d:fa:fd:
                    64:86:eb:4e:19:f5:2f:dd:88:1c:3d:22:e2:bf:eb:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132343

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.178.0-103.13.180.255
                IPv6:
                  2001:df0:2e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:48:57:ea:b1:af:39:53:e1:1b:32:da:1d:c8:7f:a5:32:ec:
         60:7d:f6:e9:92:95:b6:56:4e:52:f3:74:b9:62:86:03:cb:f2:
         d1:c9:ff:f7:6c:52:98:2d:39:39:35:b6:f7:01:37:11:88:18:
         24:d9:ef:d4:12:ee:bc:b3:a2:b5:32:c1:f7:76:c9:bd:7d:c1:
         ed:77:7f:5b:3d:01:3e:f9:3d:09:cf:ca:c1:10:1d:ca:3a:ad:
         53:17:7d:bf:33:cf:08:99:7c:40:dd:05:48:05:72:fd:87:55:
         1e:49:85:91:df:76:fb:2e:16:5b:17:ee:e2:7a:b0:3d:3d:22:
         79:b0:3d:b5:f0:ae:a9:b6:41:b0:e9:04:7b:b1:62:7d:96:ac:
         9d:7c:72:9c:88:00:b2:a3:c6:47:40:77:b2:19:4a:9d:74:b0:
         2c:5e:81:23:df:db:d3:a7:2f:6a:eb:37:10:85:60:fc:42:d5:
         48:d3:8d:80:d4:f8:5b:c0:6a:d9:d4:40:d5:d8:f6:41:c3:b5:
         de:66:c1:dd:db:9b:56:9e:ee:96:52:33:2a:22:e5:72:75:bf:
         9c:83:fe:31:7c:9f:38:b1:a2:2c:29:80:cf:53:40:17:bc:22:
         82:e7:a2:af:46:8d:b4:ae:57:6f:7f:a2:82:b0:6a:46:ac:e9:
         32:b1:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:00:47 2026 by rpki-client