Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
File:                     SrvXMBz_f7SstqBKFPCjbM6FYRw.cer (raw, json)
Hash identifier:          OO7bnLl0FgwHYUBEI6jQRATb+d4kVlqlrKUdrzqpsm0=
Subject key identifier:   4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02ABE8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 10 Apr 2026 14:58:16 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 141780
                          AS: 150787
                          IP: 103.163.225.0/24
                          IP: 103.243.179.0/24
                          IP: 2001:df6:3480::/47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175080 (0x2abe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 10 14:58:16 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:8c:36:60:a7:b9:df:1b:92:92:55:6e:b8:
                    bd:86:1a:23:8c:40:a7:62:1a:96:f5:59:2e:38:d9:
                    34:a8:78:99:7b:9d:65:8b:a1:75:5e:83:ce:45:c9:
                    8d:bc:9e:81:49:28:63:fb:3c:ef:5c:8c:62:fb:a5:
                    cf:aa:19:3d:dd:37:8b:ca:47:08:7a:1d:91:c9:1e:
                    11:d8:78:5f:2c:9d:bd:cd:00:f1:d3:c5:4c:ac:cb:
                    c7:ba:57:0c:ab:dd:9b:85:67:8d:7a:81:bf:78:1f:
                    8d:8e:67:45:80:34:98:55:5f:63:af:de:cf:d5:5a:
                    47:4e:0e:31:c6:72:0d:42:98:58:41:a5:78:c2:74:
                    79:2b:8d:4d:09:42:5c:8d:2c:80:a2:7c:98:9a:dc:
                    f1:58:88:d8:6b:b9:99:ca:be:db:df:ac:2f:42:6b:
                    04:ab:99:4e:58:fc:a5:f6:80:26:ea:fb:4e:b3:d6:
                    ea:65:3b:84:2a:ee:2b:33:ff:a7:4b:da:80:3f:c9:
                    46:f7:b8:92:8d:8e:73:92:4d:21:e7:8b:90:67:47:
                    9b:ab:d7:c2:d8:e7:69:f9:f7:49:32:17:c4:9a:bf:
                    8b:dd:c8:75:f1:94:ad:cb:5f:bc:90:67:41:1d:8b:
                    c3:e3:b7:98:0a:01:d4:be:1b:ec:67:fc:41:15:8e:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141780
                  150787

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.225.0/24
                  103.243.179.0/24
                IPv6:
                  2001:df6:3480::/47

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:46:b5:48:57:29:5d:2e:20:c9:6d:98:31:d0:12:c6:09:
         9f:a1:18:09:26:67:31:12:d1:6c:83:d4:54:0a:c1:af:0d:81:
         de:30:38:ac:50:54:0b:b4:78:64:42:ec:45:8b:34:1a:4c:84:
         7c:ef:c5:10:62:c7:fb:92:7f:13:8b:29:1b:77:5a:60:8e:9d:
         8c:84:30:af:52:4e:91:9d:3d:45:ec:97:e3:b1:ad:4f:a5:8e:
         5f:e6:87:40:9c:8c:98:0b:2a:0e:54:34:dc:e1:72:b9:0d:ee:
         c6:77:2b:41:8e:85:10:2e:71:24:30:59:5c:61:68:a4:c1:37:
         07:41:de:43:32:c9:2f:78:d5:65:3e:ef:49:9e:65:f0:73:0e:
         54:05:0a:36:39:08:83:6d:28:85:02:38:71:d9:53:75:9f:43:
         e1:2c:41:d1:a2:90:fc:ee:9b:a5:7f:fb:41:08:fe:fc:a3:ee:
         09:b3:28:ea:23:91:d0:ce:23:d0:c0:12:3b:bb:00:3c:c3:d4:
         25:3f:66:a6:ea:84:4e:b6:3b:37:34:f5:95:65:02:7b:97:be:
         f3:e5:1b:97:ef:b8:44:b4:c2:4b:74:bc:5c:5a:21:36:27:9f:
         e1:44:83:73:fe:c5:2a:9f:e3:60:67:bc:9c:5b:24:6c:e3:5c:
         88:c2:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:58:43 2026 by rpki-client