Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
File:                     UaPqilmxE10_cJKFLMv2DJnGPPc.cer (raw, json)
Hash identifier:          BjNYSXbg2R9oBuedu7WNJ5HTUyZx+cd3ctwSwu7A96w=
Subject key identifier:   51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C78D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 27 Jul 2026 03:28:30 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 150108
                          IP: 103.122.222.0/23
                          IP: 2400:f160::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182157 (0x2c78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 03:28:30 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A918664E, serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:1b:f8:5f:f8:61:b8:c2:c9:59:83:59:7c:
                    31:34:00:7e:f4:b6:46:d2:44:c5:19:20:96:e9:1c:
                    83:2f:b8:12:bc:b6:15:8c:91:c1:01:3f:78:ce:a1:
                    3d:67:96:ba:45:af:de:8f:8f:a5:e8:66:c9:f9:77:
                    38:a1:6f:d3:ca:a5:7a:fa:6f:21:a0:b2:75:75:a7:
                    9c:f4:84:75:0d:7e:25:5c:dc:40:0e:44:0d:26:69:
                    09:e1:0a:8a:bd:c1:66:9f:50:17:cb:5c:0a:d3:74:
                    ab:d2:01:5a:03:9d:bf:09:65:80:cf:1d:9e:1b:c6:
                    1a:04:a7:77:4a:4c:aa:c4:ee:4c:4b:25:de:28:fc:
                    1a:2b:83:c5:33:cc:af:bc:64:70:4d:71:4b:87:15:
                    ce:7a:c0:9f:19:8c:e8:ce:0c:bd:29:d4:29:08:51:
                    ef:40:46:25:c3:42:62:13:d5:0c:4b:25:a4:23:45:
                    de:1b:c4:6c:23:8e:1c:bb:89:db:5a:f3:71:6a:9f:
                    a6:42:2b:63:69:ed:7b:4d:16:e8:ae:60:9d:31:6c:
                    cb:04:eb:36:de:39:8c:2d:86:8b:38:9a:75:94:f7:
                    dc:cd:fb:58:69:ab:2d:2c:2f:74:ea:66:ba:7a:40:
                    66:03:5e:a1:2b:cc:e7:e9:6f:59:2f:9e:bf:e8:76:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150108

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.222.0/23
                IPv6:
                  2400:f160::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:20:e8:1b:e9:c9:89:47:c8:58:e4:3d:52:d1:18:eb:94:90:
         85:44:64:93:73:61:7b:32:68:f8:62:df:89:02:1c:81:99:84:
         8c:9d:bc:90:88:bb:79:48:fd:62:69:59:f2:b9:10:88:86:52:
         8c:c5:ad:b4:05:41:fc:f6:f0:eb:6c:0c:ba:80:eb:76:cd:e9:
         5f:76:8f:ae:d6:7b:89:a2:25:45:55:89:5a:55:77:20:ec:28:
         97:6b:48:41:43:5d:87:78:e3:be:d9:67:52:cb:ed:fc:33:5f:
         ef:fe:89:d6:7f:15:e2:f8:a8:58:d2:7b:96:5a:a3:d7:27:e2:
         ff:6b:85:89:a9:d1:37:9b:38:6c:b6:e3:d4:99:e1:62:5b:01:
         bd:88:f4:e0:a3:ad:2a:74:ff:80:36:92:d8:7e:ac:4c:e8:5a:
         21:27:f2:bb:fd:e7:56:17:26:a5:5e:7c:80:a8:3c:27:c3:0e:
         92:81:14:0f:b9:b0:01:da:5e:e5:17:cf:1d:18:97:d4:f5:b8:
         8a:62:c6:be:fd:0c:61:e3:7b:42:60:a3:11:aa:d1:30:1f:b2:
         da:e4:34:3a:62:e3:29:5b:77:ea:41:2c:91:9d:90:78:cb:35:
         76:ee:2e:b2:9f:4e:2d:65:0c:9c:b9:86:f1:5a:96:dc:ba:32:
         a6:e3:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:04 2026 by rpki-client