Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer
File:                     eT80tql6t1A1WBv90ICDiTOrPwM.cer (raw, json)
Hash identifier:          +LXcy+LBzDtaclu//TQXdRxTgkD70cJ9AxehEzZc1bo=
Subject key identifier:   79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B4C9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 May 2026 14:42:01 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 152725
                          IP: 103.52.4.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177353 (0x2b4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 14 14:42:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91EB9FC, serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:3b:a8:ad:31:3c:59:bd:f6:68:de:f1:d2:
                    4f:48:02:1a:2f:41:cf:cb:fc:0e:43:27:cf:4a:15:
                    75:c8:2b:c9:c9:62:42:bc:a1:b4:7d:d0:0b:7f:cf:
                    c0:2a:3f:34:99:c0:d0:83:e5:10:d8:cd:b6:41:1d:
                    02:4a:7c:e5:d5:cf:08:10:0a:dd:b9:cb:03:d0:0a:
                    56:aa:b0:01:79:fc:e4:e0:30:e5:f0:50:b2:25:17:
                    10:74:58:cf:f4:10:c5:11:29:6f:f1:a5:68:ca:75:
                    c4:95:4e:26:f8:10:d5:36:b9:e9:33:7a:ca:cf:a8:
                    67:c8:2c:50:13:1e:e8:e7:54:cb:c7:d4:7e:b7:9c:
                    d8:8f:8d:2a:65:0d:0d:03:cd:bd:8d:18:3c:d0:af:
                    e8:f1:bf:b8:47:17:6b:52:a0:d3:6f:bb:6a:87:07:
                    9c:1e:49:43:39:aa:72:30:fe:76:b3:66:a5:c4:ad:
                    40:1c:ef:fa:0b:02:3a:52:36:00:ab:59:e6:3c:e4:
                    1e:4b:74:d5:d6:c3:c3:f6:c7:a5:3e:f3:32:78:11:
                    b7:63:12:0d:db:60:8c:14:2f:26:0b:fd:50:3e:fe:
                    21:cd:01:45:87:26:35:51:86:71:8e:38:45:99:d1:
                    da:31:0c:3d:f1:5e:d2:78:a9:46:2c:26:cd:fa:e1:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152725

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:59:49:e1:3b:6f:cf:44:3f:55:b9:e7:53:af:04:a0:72:
         c7:e6:75:76:99:5a:54:12:62:7b:3c:08:84:3a:e8:5c:d2:07:
         b2:e6:b8:44:d9:8e:62:0f:9c:55:f5:a4:01:e5:a8:ad:a7:3f:
         51:c4:15:20:ff:a5:96:e9:17:5d:a9:9c:c3:0f:62:8d:ed:19:
         04:2a:55:ad:8c:08:02:b7:e9:b8:cd:cb:34:30:bf:ab:69:88:
         4c:76:0f:06:ff:77:2b:d9:9d:88:9d:1b:93:c0:00:6b:02:68:
         e9:b0:9d:93:6f:fa:cf:21:65:c4:6e:91:f1:52:ea:eb:2f:52:
         32:7d:6b:dd:3a:5c:81:ea:6f:ce:dc:9c:5a:50:39:a6:e4:68:
         35:6a:ec:54:25:75:d7:48:42:9b:bd:1f:c9:06:2f:f5:1c:cc:
         e0:ac:32:44:98:73:96:da:fb:b2:56:f5:47:a4:10:e1:94:39:
         3f:cf:6f:a9:c9:9f:0c:2b:1d:94:46:fe:bd:09:4e:30:81:c4:
         69:bc:52:0f:66:71:cd:1d:e8:d0:46:86:b8:08:76:43:d1:83:
         58:4e:fc:d4:c6:83:b6:d8:0e:de:54:9a:90:0c:be:d1:f3:ca:
         08:af:cd:df:30:9a:b4:40:6e:09:04:ea:17:4e:19:65:8d:07:
         a2:55:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:06 2026 by rpki-client