Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
File:                     _9C9_G0db07W7Tg5A59B6e3Gb7o.cer (raw, json)
Hash identifier:          AJAkiqMVXFdnRHnqkmzrVCIySpR8t7OtsO6XFzdtoDI=
Subject key identifier:   FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BCC2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 11 Jun 2026 13:40:42 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 137886
                          IP: 103.116.134.0/24
                          IP: 2001:df5:5300::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179394 (0x2bcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 11 13:40:42 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:8e:8e:33:3a:b4:20:c6:2b:09:8c:50:36:
                    bc:2d:83:71:24:dc:89:e5:0b:90:12:cf:b7:a6:4f:
                    8c:c5:2d:6a:26:16:dd:4a:a9:53:f5:a8:da:c2:b0:
                    fd:64:e8:40:bd:47:80:75:43:81:4f:db:81:b5:48:
                    24:0f:c9:72:12:30:84:70:9b:2b:73:89:41:fd:f8:
                    27:df:7d:de:1e:d2:a3:89:7d:cf:b2:92:89:f8:7b:
                    c3:f8:eb:5a:27:5a:73:97:de:f5:fd:16:26:4d:61:
                    fc:03:e3:50:ab:8a:a3:c0:5f:ec:3a:a1:44:6d:78:
                    c1:a8:8d:7b:8c:1e:42:b6:2f:de:56:3c:57:bf:da:
                    35:cb:e9:1f:76:2c:9a:83:31:ca:27:1e:d8:66:34:
                    b9:b2:a9:87:88:f7:70:9d:21:70:c1:b8:95:34:90:
                    96:c5:04:22:31:d3:ce:ac:d0:a7:cb:cf:f5:76:d5:
                    f8:d4:f4:01:28:c5:50:a0:08:ef:36:22:e1:37:c6:
                    1e:c9:2e:b1:1b:4a:3a:fa:57:3b:3b:bb:58:c1:f0:
                    5a:d8:0f:38:6a:7d:70:1d:1e:47:ac:c8:e5:84:fa:
                    db:4d:ea:8d:71:67:21:26:88:04:c4:75:87:4b:38:
                    4c:98:c1:bf:b7:ef:c9:73:64:29:21:df:a4:50:84:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137886

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.134.0/24
                IPv6:
                  2001:df5:5300::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:f1:26:42:59:7c:fe:8b:f9:37:89:c8:a8:eb:87:ba:c3:b4:
         de:d7:8b:e8:74:b0:73:2e:31:b8:d6:ce:52:2f:bb:1f:6c:83:
         11:4e:42:bb:7b:e4:19:98:04:c6:b9:ab:18:90:28:ad:bc:ca:
         88:4e:33:3d:d9:09:e3:e4:fb:8b:59:f0:8f:96:d5:35:e0:01:
         c9:40:3e:18:30:e8:a8:e5:1b:6f:dc:3c:c6:ff:d1:59:73:c1:
         82:92:3b:56:55:48:98:54:46:0d:4b:92:89:85:97:0e:63:98:
         13:ed:24:3c:7a:32:82:ab:ea:e3:0b:46:a0:36:24:cb:f0:57:
         39:77:7e:cf:04:6d:5b:fa:e7:1c:49:ed:b4:72:00:a5:33:24:
         65:de:1d:60:28:53:aa:bf:0b:da:ed:f9:84:9c:e7:1c:7e:e8:
         17:81:b7:81:36:d0:41:27:3b:94:b9:f3:5e:56:2f:8f:a9:29:
         46:68:8e:28:f9:20:1f:9b:20:d6:a6:ff:f4:64:b6:86:2f:12:
         2e:ba:e4:05:3f:2a:b7:f7:05:5f:62:08:15:03:7e:1c:7c:99:
         ee:a3:44:2b:e5:86:b7:50:12:1a:bd:32:00:9b:67:ab:60:ee:
         db:1c:75:77:03:40:4b:ed:ec:09:62:b1:ee:04:31:6c:f1:02:
         af:94:dd:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:11 2026 by rpki-client