Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-be_ZvopUY9VL7yEyKZon3IaVU.cer
File:                     a-be_ZvopUY9VL7yEyKZon3IaVU.cer (raw, json)
Hash identifier:          njODIzpE9f23lPS9Vp/EkBB9sN+16WZEqST2qaxpww4=
Subject key identifier:   6B:E6:DE:FD:9B:E8:A5:46:3D:54:BE:F2:13:22:99:A2:7D:C8:69:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D65F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134317/6266552AB19F11F1B2815B947011F970/a-be_ZvopUY9VL7yEyKZon3IaVU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134317/6266552AB19F11F1B2815B947011F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 16 Sep 2026 07:22:37 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 58908
                          IP: 103.25.8.0/23
                          IP: 103.248.0.0/23
                          IP: 150.242.212.0/22
                          IP: 2406:ff00::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 13:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185951 (0x2d65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 16 07:22:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9134317, serialNumber=6BE6DEFD9BE8A5463D54BEF2132299A27DC86955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:c1:52:1b:89:18:1b:9f:5f:6f:3f:2a:52:
                    19:73:f2:9c:c4:5e:9f:33:a4:0f:04:26:cf:7e:f9:
                    e0:07:9c:08:81:42:a0:ce:67:d2:8e:7c:e0:92:99:
                    79:d8:e6:40:e3:17:de:06:03:4d:2d:99:25:84:59:
                    84:01:23:fb:3c:5c:28:c3:e2:4c:f7:68:06:6f:20:
                    99:37:66:11:a7:69:31:19:49:c6:6d:f9:8b:61:83:
                    80:52:60:a8:29:fa:1c:be:cc:5e:16:d8:53:d2:fc:
                    e0:e8:82:b3:23:38:b9:f3:f0:e3:13:17:92:6c:20:
                    d9:7e:d4:0a:1a:02:9e:ba:10:71:83:4d:5d:d8:62:
                    9e:31:71:7a:6f:f3:4e:58:5a:14:b3:bf:1d:c8:08:
                    2d:19:16:6d:1f:89:9d:e6:4f:ba:20:1f:a9:e5:a3:
                    86:58:f2:b4:f4:22:ed:31:c7:bd:c9:89:3c:99:1d:
                    1c:80:60:5a:53:eb:86:1d:28:44:cc:b9:ed:16:63:
                    73:8a:29:e7:1c:44:af:84:fb:32:57:f2:46:de:47:
                    27:e4:7c:94:88:b2:ae:22:40:23:da:f9:58:17:2a:
                    6a:5b:4c:f0:d1:99:43:53:50:77:ab:6d:d1:77:f8:
                    f9:68:4c:c0:6c:63:5c:6f:c2:ed:e7:0f:b6:fc:8a:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:DE:FD:9B:E8:A5:46:3D:54:BE:F2:13:22:99:A2:7D:C8:69:55
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134317/6266552AB19F11F1B2815B947011F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134317/6266552AB19F11F1B2815B947011F970/a-be_ZvopUY9VL7yEyKZon3IaVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58908

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.8.0/23
                  103.248.0.0/23
                  150.242.212.0/22
                IPv6:
                  2406:ff00::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:13:59:f8:40:3a:bf:05:1e:19:41:78:14:1e:80:da:de:19:
         e0:35:09:37:8b:d5:94:34:57:63:95:31:f2:59:78:b6:73:79:
         f8:cb:85:e5:04:df:52:b6:83:41:85:40:95:ae:4c:b6:89:4e:
         39:05:ab:15:d5:b6:68:98:39:7c:5b:84:b0:dd:9d:48:32:0b:
         a6:61:53:c5:c2:48:5d:83:b6:9e:b5:6d:c2:3e:89:ef:ff:74:
         d9:a9:69:84:9b:4b:be:cd:29:37:83:a2:74:bf:42:bb:a3:4e:
         22:a3:a0:5a:f2:6c:e0:f5:23:29:90:c0:5d:fc:65:e2:85:73:
         69:a6:11:9f:a4:3c:42:16:80:83:db:05:12:87:55:fc:a8:55:
         a0:80:45:cf:ff:89:4c:24:cd:e9:46:12:b6:96:9d:ce:68:3e:
         83:85:ae:df:b4:8a:a7:24:d7:ab:d6:c2:e0:7c:2e:f5:ce:b4:
         47:76:35:aa:6c:f6:a9:b1:e6:ba:a3:45:3c:3e:54:7b:d2:59:
         57:6c:d4:a3:75:be:d8:3d:16:d4:b5:b8:4f:38:61:ec:cc:12:
         5f:a1:aa:89:c0:6e:4d:7c:a6:c7:0a:78:d1:5b:c9:9c:e6:32:
         46:18:88:22:62:19:3e:c3:09:4e:4f:65:f0:9f:cc:96:0e:12:
         2d:4d:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:22 2026 by rpki-client