Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
File:                     fjub3aUOjafVD_OnwzKc9IPVF-k.cer (raw, json)
Hash identifier:          7ocCLv2uDC1xR1FMByVRtxgh7fQc3VmXhrwivXDB2PI=
Subject key identifier:   7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AC74
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Apr 2026 12:21:57 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 132031
                          IP: 103.82.200.0/23
                          IP: 2001:df1:ebc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175220 (0x2ac74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 14 12:21:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:80:97:ea:eb:e2:5f:8c:d7:70:85:a3:17:
                    f1:f1:2f:bb:2a:26:79:75:e5:b0:9d:ac:4c:d0:a3:
                    ae:a6:2a:97:8d:83:6d:2f:83:3c:10:7e:bd:b9:0e:
                    b9:d0:05:8b:30:17:aa:60:9f:27:d6:53:65:9b:8a:
                    0f:e2:38:ce:cc:d3:55:29:e1:01:9a:22:78:a4:d1:
                    11:71:6c:3d:26:29:af:e6:9e:a8:2a:ee:35:03:f3:
                    21:01:d0:19:25:26:29:f8:c1:fc:01:cd:ca:df:87:
                    62:de:83:bf:11:e4:54:2a:a0:f9:ac:f2:c9:55:e0:
                    67:47:dc:cf:f4:c4:4b:51:17:0c:f5:f1:66:be:c4:
                    a4:a8:a4:56:9d:e7:f0:23:52:05:c2:40:85:c0:92:
                    0b:d3:be:05:77:c6:ae:73:26:fd:03:77:ab:21:77:
                    f1:c3:cc:22:04:98:fc:de:98:18:04:ef:59:b5:e6:
                    92:41:06:df:c7:b4:e7:ad:14:c5:c6:65:e3:5a:14:
                    78:00:96:cf:dd:90:49:f8:77:84:55:20:51:5c:21:
                    f3:db:58:90:4d:9b:8a:eb:b7:ea:a4:e1:7a:7f:49:
                    04:09:20:82:b7:af:c4:89:ce:2c:ad:d0:ea:9e:55:
                    b3:f8:67:91:8f:b6:d3:c2:60:f9:08:ce:2d:73:0d:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132031

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.200.0/23
                IPv6:
                  2001:df1:ebc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:8e:e0:37:39:ce:6f:ce:72:56:dd:e7:e9:b4:d0:fb:c9:
         f4:80:52:d2:45:35:b0:bf:4b:f2:6b:48:e6:f1:c5:c3:51:fa:
         f7:06:26:e0:6b:d6:2d:30:2b:5d:c6:4f:80:a2:31:90:2a:36:
         9a:54:0b:d1:57:21:b4:58:a9:2a:27:ed:8e:e7:e6:42:b9:b3:
         df:3e:c8:78:82:d5:4a:47:cc:c6:3d:73:03:5e:61:bb:47:c9:
         8c:f8:86:e6:b4:a7:b7:f3:65:85:c9:bc:39:6b:ea:b7:18:a4:
         9d:1d:79:23:8a:7e:f3:b1:58:5e:31:94:52:5f:b7:b0:a5:39:
         d2:55:0e:0e:72:fe:10:1b:b7:90:e7:cf:0d:f4:83:37:ca:08:
         ad:57:a9:10:b8:73:a9:53:19:38:66:34:9d:54:16:bf:d7:d9:
         f0:9a:6a:92:65:e7:ac:a4:47:f2:fa:29:5a:d3:c6:4d:42:82:
         1d:ed:71:85:f9:c7:6b:34:b4:df:1b:e2:75:04:7d:e9:34:fd:
         71:db:42:fe:31:34:bb:ef:f1:fa:bb:40:79:d3:45:40:38:f2:
         90:7c:92:b3:a7:cd:93:fc:4c:b2:81:5b:2b:1a:55:e8:79:a4:
         cd:b1:20:33:fc:4e:63:4a:ff:47:51:e5:66:c0:7d:00:c5:ce:
         af:50:9e:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:01 2026 by rpki-client