Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
File:                     XUXapVj_ZfZmNblniAm4rPBAc9I.cer (raw, json)
Hash identifier:          ZzoPwsxWjDjDmFoDzGW8ilCDa7F1bFt8/T12Z3i8tWY=
Subject key identifier:   5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B78F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 27 May 2026 14:43:20 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 136562
                          IP: 103.92.212.0/23
                          IP: 2401:2140::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178063 (0x2b78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 27 14:43:20 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91F52FD, serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:15:38:20:6e:d5:ed:f8:c8:08:43:6f:a0:
                    93:42:bf:c6:19:48:e4:f8:36:97:26:93:cc:8b:6c:
                    e7:34:31:cb:d5:55:47:17:6f:16:1d:82:40:49:da:
                    ff:d7:28:48:1d:6a:ce:82:9d:3e:2a:df:e3:8c:b3:
                    2a:6f:79:ac:7e:28:16:c0:6c:fb:d0:9b:b6:69:c0:
                    85:6e:bf:b2:2a:3a:db:0e:ff:a2:03:09:8d:49:c1:
                    b3:3b:89:67:e7:93:63:ff:73:c9:53:3d:6c:ff:a0:
                    2f:37:89:2f:07:28:dd:e4:97:87:60:a3:3e:5b:9f:
                    eb:ad:6a:65:e8:a3:e1:4a:d3:72:76:2e:c6:2b:0f:
                    d3:ef:51:60:38:35:8b:c2:c2:18:76:6e:d7:29:07:
                    60:7b:1f:d0:31:49:c0:85:c6:df:19:7b:15:d3:5d:
                    35:d1:31:08:0d:64:43:69:61:54:15:07:a0:4f:af:
                    58:ec:cb:d9:a0:19:05:4b:9b:2c:fe:27:67:b2:03:
                    56:13:77:07:cb:d7:90:31:4f:e8:5d:69:a1:bc:f8:
                    96:d8:b8:77:2b:1a:ef:38:94:eb:6b:b7:da:c6:fa:
                    d1:71:b5:d0:fb:63:30:ba:c7:a7:28:93:cf:e6:e5:
                    46:96:83:f7:df:1e:ad:7a:5f:83:97:ec:71:63:09:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136562

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.212.0/23
                IPv6:
                  2401:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:98:c2:b8:f7:cc:a9:89:6b:7a:d4:04:d8:5b:2e:b6:05:
         a8:34:cf:42:dd:f9:9f:7c:4e:81:f6:5f:8e:01:91:4a:e7:03:
         22:90:c6:25:9f:18:99:10:fd:58:c4:4e:ae:35:4f:9b:cc:c0:
         da:db:6b:89:ed:41:3d:0d:69:39:87:33:f5:46:e6:27:81:93:
         c3:73:08:e6:0c:b9:fd:d5:74:bb:a5:75:f5:60:9f:da:c0:25:
         e8:0a:b3:57:7b:88:4f:da:88:36:b3:25:61:d2:34:e7:58:b5:
         82:fb:b7:83:7d:31:32:ff:ef:81:79:e3:e1:65:02:f7:4e:55:
         1b:7a:74:78:34:2c:0d:09:10:1a:f4:d4:b5:16:15:4c:94:5a:
         73:e7:51:fb:ea:10:a0:5a:ef:62:e6:31:ba:a5:d4:95:a0:a6:
         ef:94:e7:69:fe:19:7a:ab:e9:ca:66:1d:73:11:c5:a8:2e:91:
         5c:ca:a8:40:ad:80:e1:3a:a2:67:44:f4:46:57:41:5e:51:de:
         bb:eb:2c:a5:d9:b5:e8:12:71:17:bd:04:20:3f:40:cd:3a:99:
         d5:8f:e0:87:ed:0b:e6:21:53:fb:6d:ad:9e:9f:44:91:5f:97:
         e4:9f:e8:41:22:69:35:fe:6e:48:c7:f5:27:0a:c0:82:f7:96:
         cf:ea:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:50 2026 by rpki-client