
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
File:                     ZWJxEurnsskvifeninGipPqV9T0.cer (raw, json)
Hash identifier:          wsYkEYEU7SUGRILIt3NBeGqgEApzwRT4mFuXUNmkLjs=
Subject key identifier:   65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027211
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Nov 2025 15:27:04 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 24046
                          IP: 203.10.24.0/21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 00:25:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160273 (0x27211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  2 15:27:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:7a:b9:c7:1c:2a:a2:e4:9c:23:99:db:d6:
                    d6:6b:eb:bf:c2:c3:4d:d7:d9:90:f9:78:05:54:c4:
                    bf:05:e1:80:ce:d5:6a:e0:7c:91:55:41:f5:59:bb:
                    ad:57:b3:bb:c7:11:fc:36:e9:45:a3:4a:c0:b2:f4:
                    cf:d6:dc:46:ef:a8:40:9e:66:33:cc:cc:0b:07:91:
                    e9:5a:2c:3e:1e:b9:6b:46:5a:ff:19:1b:11:93:ec:
                    90:1b:6e:26:30:69:70:e3:22:bc:63:c2:0c:44:c6:
                    a6:b1:93:82:36:c4:8f:5b:5c:cc:0c:37:8d:46:15:
                    ae:e2:a0:a8:19:4b:4b:24:d3:8e:67:47:3e:52:7a:
                    b4:6a:b6:86:21:45:f2:74:78:1b:82:2a:11:70:ac:
                    a2:4a:ee:32:8d:46:82:bb:db:de:98:f4:20:17:cc:
                    f8:16:4d:c8:a4:f9:af:50:7b:2e:4b:a7:f5:1f:87:
                    48:4e:d7:45:99:81:6f:e2:e5:26:0d:f9:6e:eb:1f:
                    18:17:49:d3:3b:2c:35:f9:5e:a9:b3:6a:46:b1:ea:
                    7f:73:71:ed:2a:ed:7d:61:ad:c2:6b:97:18:ec:90:
                    0a:2f:7b:19:43:e9:dc:5e:4e:57:db:86:23:75:e0:
                    70:b4:80:01:99:87:c0:cf:51:79:04:45:6e:9f:37:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24046
            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0/21
    Signature Algorithm: sha256WithRSAEncryption
         be:0f:75:32:c0:07:de:a5:f8:b8:6e:13:71:b6:74:0f:46:3c:
         e0:ec:18:74:b8:14:a8:c2:49:08:f3:76:61:df:0a:e2:28:c4:
         18:41:25:48:2f:6a:0c:a5:76:a1:6e:1f:08:b8:bf:0e:41:c6:
         8a:a5:90:10:39:51:ac:33:64:29:c2:26:2a:d6:44:b5:db:6e:
         86:a1:5b:cf:45:bd:47:e3:ec:9f:6f:e5:2c:b3:fb:73:d4:15:
         e5:d6:f2:00:38:33:ee:d6:66:e5:60:fb:13:38:9c:bb:a2:43:
         54:96:bf:53:80:e0:3d:f1:28:f6:46:6a:04:dc:36:d1:26:47:
         85:b7:c5:a8:0a:db:49:83:4f:18:5d:b8:c2:d1:00:14:04:f8:
         5b:05:3e:a5:29:53:81:62:b0:1d:5a:5c:e8:9f:e3:09:aa:87:
         29:91:14:44:ee:4c:22:16:41:a9:62:d5:cc:c3:b9:85:7f:ff:
         0a:8a:0b:35:da:15:e7:d9:94:b4:0a:f8:3e:a3:a4:0e:a3:57:
         d6:a0:31:94:55:7c:da:4e:98:50:38:d3:9c:1e:db:07:27:13:
         a9:96:65:4d:b3:df:00:35:62:45:0b:6b:b9:d1:2c:44:21:c9:
         3b:88:e5:de:2b:0f:ee:2c:17:40:7f:52:c7:f9:de:a1:29:47:
         ae:29:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:12:44 2025 by rpki-client