Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
File:                     gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer (raw, json)
Hash identifier:          SMPsrDUHiXteB66JaBU7ZHBp02/gL1pOTg20GWJ6hjA=
Subject key identifier:   80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D6B7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 17 Sep 2026 12:26:51 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 55769
                          IP: 45.250.236.0/22
                          IP: 103.242.56.0/22
                          IP: 144.48.136.0/22
                          IP: 144.48.228.0/22
                          IP: 157.119.96.0/22
                          IP: 202.53.144.0/22
                          IP: 2405:e280::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186039 (0x2d6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 17 12:26:51 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:5a:2e:3c:73:50:c3:e6:76:5a:5d:93:4d:
                    b1:a5:ba:ec:f9:dd:4e:73:56:a1:e5:49:3c:d5:b1:
                    d2:1f:9d:b0:21:40:24:d8:11:6f:e1:2c:a2:79:b0:
                    e0:2d:a6:a7:75:97:31:90:d9:85:7b:ba:37:1b:19:
                    de:bc:f7:3f:41:9b:14:da:3e:d4:ee:3f:1a:96:27:
                    95:79:14:ce:f3:a5:b5:fa:26:7d:62:fe:85:fa:9f:
                    2d:30:be:fc:2a:82:f3:2a:6b:f4:4b:e0:ac:2d:5b:
                    6d:87:c0:16:14:a1:3b:90:14:4d:c1:f6:fb:77:f8:
                    27:a4:5c:b1:da:12:3a:cf:5b:37:07:0c:ee:72:8c:
                    3e:38:96:7c:b4:20:1f:6e:4c:03:70:18:63:70:be:
                    3f:e0:db:04:ef:60:68:d2:4a:36:6b:16:cd:3c:3c:
                    5d:8d:ab:65:e7:49:7a:ab:f6:1e:9f:6a:66:8e:dc:
                    6f:b7:a6:e1:c4:96:51:a7:26:d9:dd:91:a0:1f:03:
                    03:64:7f:c7:3a:e4:0f:e5:98:48:c7:8b:e6:32:da:
                    33:d4:5c:39:88:8c:76:87:17:1d:00:98:ae:e9:4c:
                    b9:33:53:de:2c:45:6b:93:95:f5:ba:64:8f:f4:d4:
                    21:bf:66:e1:1d:dd:8a:3f:9b:f2:ff:71:8c:23:2c:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55769

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.236.0/22
                  103.242.56.0/22
                  144.48.136.0/22
                  144.48.228.0/22
                  157.119.96.0/22
                  202.53.144.0/22
                IPv6:
                  2405:e280::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:7b:d7:aa:b0:22:c0:40:b4:d8:91:35:cc:3a:10:d5:ba:
         0b:9d:51:98:b7:be:78:7a:af:be:6c:8b:a1:77:d8:57:a1:bf:
         46:4f:84:31:07:b4:20:ad:fe:67:b3:e8:5a:96:b9:51:e2:83:
         9f:8e:c0:04:16:62:84:9c:f6:ab:01:cd:a5:c2:0b:e0:7a:0c:
         f6:a8:08:3d:6b:a4:78:45:6a:f2:06:f5:72:8b:b0:32:e2:f4:
         56:a7:70:6b:12:6c:5d:e1:99:b0:9f:5a:a1:de:ec:9b:39:b3:
         9b:e9:66:f2:7b:64:ff:24:8f:f3:c1:93:64:48:79:82:41:5f:
         53:ce:d3:4b:65:db:eb:1f:a5:33:48:2b:82:68:55:e6:d0:28:
         ce:e8:46:e5:4a:58:97:e0:04:31:95:54:1a:e6:36:d4:40:9e:
         5d:c4:84:c7:e3:94:fc:c6:55:1f:bb:76:d4:8e:8e:0d:22:bf:
         5d:da:e7:1b:89:17:e9:1b:bb:fd:10:7c:98:c7:87:cc:72:3f:
         30:02:a2:3c:d3:90:c2:af:73:a6:5e:82:a4:b6:b9:30:ec:c8:
         9e:bb:d2:a6:91:ed:c3:75:1a:d6:de:1c:24:4a:87:03:b6:26:
         e0:4d:fc:d9:b8:20:0b:ca:29:f9:e9:bc:92:33:71:d5:fb:99:
         c9:3f:54:5f
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDAta3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkxNzEyMjY1MVoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0
NTEwODExMDQwNjg3NUZFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3mFouPHNQw+Z2Wl2TTbGluuz53U5zVqHlSTzVsdIfnbAhQCTYEW/hLKJ5sOAt
pqd1lzGQ2YV7ujcbGd689z9BmxTaPtTuPxqWJ5V5FM7zpbX6Jn1i/oX6ny0wvvwq
gvMqa/RL4KwtW22HwBYUoTuQFE3B9vt3+CekXLHaEjrPWzcHDO5yjD44lny0IB9u
TANwGGNwvj/g2wTvYGjSSjZrFs08PF2Nq2XnSXqr9h6famaO3G+3puHEllGnJtnd
kaAfAwNkf8c65A/lmEjHi+Yy2jPUXDmIjHaHFx0AmK7pTLkzU94sRWuTlfW6ZI/0
1CG/ZuEd3Yo/m/L/cYwjLHcZAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUgDGIbn5g
nk9KNGpFEIEQQGh1/sgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFEQThDL0YzMTY0QzIwRDEwNjExRUNCMTI4RjQxM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExREE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41
Z25rOUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANnZMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLfrsAwQCZ/I4
AwQCkDCIAwQCkDDkAwQCnXdgAwQCyjWQMA0EAgACMAcDBQAkBeKAMA0GCSqGSIb3
DQEBCwUAA4IBAQALaXvXqrAiwEC02JE1zDoQ1boLnVGYt754eq++bIuhd9hXob9G
T4QxB7Qgrf5ns+halrlR4oOfjsAEFmKEnParAc2lwgvgegz2qAg9a6R4RWryBvVy
i7Ay4vRWp3BrEmxd4Zmwn1qh3uybObOb6Wbye2T/JI/zwZNkSHmCQV9TztNLZdvr
H6UzSCuCaFXm0CjO6EblSliX4AQxlVQa5jbUQJ5dxITH45T8xlUfu3bUjo4NIr9d
2ucbiRfpG7v9EHyYx4fMcj8wAqI805DCr3OmXoKktrkw7Mieu9Kmke3DdRrW3hwk
SocDtibgTfzZuCALyin56bySM3HV+5nJP1Rf
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:40:55 2026 by rpki-client