Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
File:                     aSE1YIaDdV6U2OylfYsLNY7OFxg.cer (raw, json)
Hash identifier:          cstAAAGGhn9cLHSNqvm3R/AqsmzjbjxBdaZfXi71OpM=
Subject key identifier:   69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BA6A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 14:14:25 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 132088
                          AS: 138986
                          IP: 103.115.140.0/22
                          IP: 2402:e940::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178794 (0x2ba6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 14:14:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:ad:dc:c6:98:5c:a5:3b:87:d4:ac:cb:13:
                    df:c6:d3:66:f0:d8:53:5b:78:c6:49:c6:18:e2:54:
                    d5:35:72:73:d6:f5:2a:30:2b:72:98:02:79:4d:52:
                    8e:20:81:04:d6:34:8e:ec:fa:e9:59:04:44:5e:c6:
                    74:58:11:01:6b:4c:26:59:88:bd:76:45:c6:a7:d3:
                    83:cf:39:64:4b:d0:cb:da:45:dc:46:53:c9:2a:df:
                    11:f8:2e:af:31:09:41:10:03:7b:32:95:75:2f:25:
                    ab:e6:ba:38:70:dd:04:1e:17:5e:c7:c3:19:62:cd:
                    22:eb:aa:c5:64:12:9b:a0:8f:0e:57:77:de:ad:ae:
                    9f:3f:13:51:a5:f7:6d:39:b9:f5:8d:dc:a9:ce:14:
                    98:88:6d:d7:22:4e:1d:86:5e:77:e7:44:ae:b9:bf:
                    c5:2b:0c:c9:4e:bc:ca:eb:b5:fb:53:2f:3b:7f:b1:
                    7f:03:96:c8:d1:dd:3f:1d:3c:d9:32:5d:3e:75:e9:
                    bb:ee:33:5f:fe:58:ac:57:8f:7f:eb:50:27:70:86:
                    57:bd:de:86:9a:d6:06:ec:63:c4:84:2a:64:c8:d3:
                    76:42:ad:33:e5:3b:27:30:82:80:cd:fe:ba:cf:31:
                    8a:47:ba:0f:a3:f0:11:7a:7a:d3:62:43:01:e6:c1:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132088
                  138986

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.140.0/22
                IPv6:
                  2402:e940::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:19:7e:88:20:8c:6d:f3:cd:1b:1f:8a:d1:07:be:96:25:21:
         b9:88:3f:89:44:ce:9e:02:1c:b1:88:29:68:84:2d:66:db:62:
         3e:8c:d1:f7:ba:b0:c1:d9:f1:97:e8:fe:9b:8b:f3:6b:29:41:
         c5:0a:8b:89:2c:d2:8b:c6:34:5f:bb:16:78:d3:a1:cd:b2:ac:
         08:3d:ec:7f:5c:a7:df:0d:1f:6f:6b:6e:dd:16:3b:77:e9:d3:
         b8:1e:3d:07:cb:5e:48:e9:ab:1a:bf:4e:2c:3b:42:57:8f:12:
         d2:d7:ad:11:83:d8:5c:f9:c2:a6:44:b0:f8:22:1c:07:57:38:
         fa:9f:cc:9e:6b:ed:bd:0d:ff:ea:90:c9:46:22:cc:02:92:ca:
         16:ce:f2:ac:e4:ed:84:be:90:47:92:49:fb:a2:16:56:a7:a7:
         47:88:21:41:b8:5c:38:54:84:ee:2e:d6:a4:4e:11:30:e4:aa:
         da:92:e6:97:b2:5c:3a:90:1a:c9:84:90:27:2c:5b:a1:1e:bd:
         f9:8f:88:35:15:dc:af:84:ee:9f:f1:6d:69:e3:34:31:0c:6c:
         7a:0c:d2:2a:60:52:a6:37:c0:f1:3e:4f:9a:ab:4e:85:6c:a2:
         eb:f4:77:7b:78:01:7d:29:45:22:ff:25:ee:1e:69:2e:bc:cd:
         bf:8d:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:29 2026 by rpki-client