Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer
File:                     cPp5EccBLljvn7BaVaTOb7Bgm88.cer (raw, json)
Hash identifier:          98uDihUQpLaFR1UZ0AZX770QFuorvgpKVNTm0T7D4VU=
Subject key identifier:   70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029DE4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:04:16 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 56057
                          IP: 103.82.152.0/22
                          IP: 111.118.220.0/22
                          IP: 2402:e500::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171492 (0x29de4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:04:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:89:6e:84:92:8e:bd:83:c2:1d:c9:59:2a:24:
                    88:5e:3c:1b:ee:b8:3a:79:e6:d3:68:1b:b6:47:aa:
                    cd:29:2e:57:6a:34:e0:4f:4e:12:ef:d5:8a:45:9e:
                    c8:1a:12:d4:4c:a5:de:c3:1e:a9:f7:c2:f0:5b:b6:
                    a1:89:69:9e:89:c0:ac:61:31:65:58:00:f3:8a:4b:
                    34:9d:f7:cc:a8:e8:5e:bc:46:83:e1:32:5a:53:ba:
                    b7:05:33:39:7f:78:f2:06:ec:2a:98:b5:8f:57:59:
                    f8:68:76:f7:35:15:bb:33:78:b6:e7:9f:38:2d:c7:
                    5e:55:ed:82:91:3b:d0:83:41:f4:54:79:d9:75:17:
                    d9:d2:85:81:30:64:7d:31:53:8e:eb:ad:ef:4a:48:
                    c2:96:cb:06:6c:37:8c:92:2e:33:e6:ea:c7:a8:08:
                    0f:ed:d9:fc:e7:da:43:7f:53:94:25:90:bc:e3:dc:
                    fa:c6:aa:0f:e9:54:da:37:9a:4f:1b:0c:45:d1:6d:
                    fc:e2:42:3d:16:6f:11:2d:5e:54:bb:d0:87:6b:99:
                    1a:ff:b6:50:98:06:2e:a1:ea:9d:19:cf:78:18:d6:
                    5b:64:ff:6b:ae:c6:28:75:8d:d2:c1:4f:6b:25:60:
                    fc:f6:e9:a9:52:b8:86:0d:8a:c3:a6:1d:96:7f:68:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56057

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.152.0/22
                  111.118.220.0/22
                IPv6:
                  2402:e500::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:b4:a9:01:b0:ab:b8:48:fe:13:cc:f0:ae:0d:17:db:18:
         df:93:5a:10:94:bc:30:a6:bf:e3:3c:9d:ff:8a:48:27:60:e6:
         f3:30:07:c0:b9:72:60:f7:5e:b0:eb:82:2b:0b:77:3d:91:0f:
         89:03:7e:9a:56:7d:0e:10:f3:4b:a1:05:1c:96:93:ec:40:99:
         bb:cc:53:68:11:9a:4b:43:8c:0f:ae:bb:ce:74:9e:8c:c3:7b:
         02:82:04:fb:fb:74:7f:fc:69:15:e0:ad:13:56:02:b0:e4:2e:
         68:00:d0:ef:57:60:c6:27:da:8d:87:a1:5e:65:05:6c:17:d4:
         07:bd:57:03:be:0f:2b:0c:10:38:10:d7:5f:67:91:91:c0:ec:
         fa:cf:69:90:a3:6e:4b:31:74:25:c9:ca:ad:97:f6:a4:dc:4f:
         d6:fd:8f:33:7f:bb:fd:a6:48:80:89:04:df:84:44:af:80:50:
         99:8f:75:b6:c2:c3:44:32:70:2a:e7:09:1c:be:9c:b4:b1:de:
         48:8d:ec:7d:15:5e:6f:b7:4e:95:fd:48:d6:c2:a4:89:ba:84:
         0d:fe:4e:f3:ed:9f:ae:2b:8a:d8:5b:1d:a9:24:b0:d1:6b:4a:
         2a:39:74:c5:95:51:ef:b0:7e:ac:a9:bc:85:18:f8:3e:03:ee:
         36:69:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:04 2026 by rpki-client