Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
File:                     ghbCCBg3GK6QL0P2htUqRHMUc5g.cer (raw, json)
Hash identifier:          tNSQBhMZR0yyTebBT6ZGoK/hW7Tysnosh8MRCYdVwJk=
Subject key identifier:   82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB42
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jun 2026 02:29:07 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 150162
                          IP: 103.130.246.0/23
                          IP: 103.208.155.0/24
                          IP: 137.59.196.0 -- 137.59.198.255
                          IP: 2400:9ee0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179010 (0x2bb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  5 02:29:07 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:ce:25:35:98:f1:d7:59:f5:b7:25:80:4d:
                    1f:72:09:fd:db:43:bb:b0:03:c2:a2:22:33:40:f0:
                    b2:ff:da:eb:dd:5a:47:a4:15:d9:5e:ca:d5:ec:4f:
                    46:71:20:ba:97:3f:f5:b2:92:41:f5:35:9a:cf:5b:
                    33:ef:0e:14:c4:38:db:be:86:dc:f6:cf:48:60:6d:
                    12:73:8a:ef:bb:16:7d:19:38:2c:1c:52:21:89:5e:
                    4d:5c:5b:b0:8e:b5:b5:6e:3e:1a:73:37:11:bb:8e:
                    9a:07:e8:30:64:ab:92:54:f2:7f:9e:ec:75:3b:fa:
                    87:5d:1c:c0:d5:05:c2:3e:7e:16:11:24:d4:bb:6e:
                    0e:9b:c7:b9:a5:8d:06:2a:22:c4:df:18:54:5f:bc:
                    8e:f6:37:fc:13:cc:56:0a:2e:a3:e3:a2:4e:48:de:
                    dd:52:d7:dc:90:10:46:29:98:69:62:ce:f2:e8:8b:
                    f7:ef:88:68:d4:08:a8:6c:be:16:3b:7b:9d:3b:fd:
                    d8:37:3e:e9:b5:38:e8:9e:49:32:6a:54:a9:1c:9e:
                    d4:b3:8d:2f:eb:38:b3:dd:87:48:71:07:f1:02:99:
                    8f:8e:01:84:e5:96:0b:12:5e:cd:62:f9:ba:f1:1d:
                    7b:e5:20:90:e6:9f:db:36:ab:e7:b4:33:a4:b5:1b:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150162

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.246.0/23
                  103.208.155.0/24
                  137.59.196.0-137.59.198.255
                IPv6:
                  2400:9ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:25:d9:03:42:90:49:a2:40:d2:29:d9:3d:dd:53:ad:d1:e2:
         67:3a:ad:1d:05:80:2a:ab:45:05:aa:fb:c7:39:3b:14:89:65:
         a8:5f:d9:b3:5e:53:c5:47:21:02:61:76:10:78:05:3d:c4:a6:
         3e:ad:f1:9d:f9:9c:12:d4:89:b9:94:8b:c8:36:e0:dc:ac:de:
         91:aa:24:4e:be:4a:ec:46:62:91:87:a8:23:61:29:b9:69:aa:
         e5:4e:69:82:a6:b9:b8:35:8d:8f:48:dd:21:02:02:b6:22:38:
         e3:4b:58:32:b5:a5:9d:58:a9:ad:9c:ee:70:eb:85:24:8e:df:
         29:28:bf:37:ae:d9:c3:cb:1f:9f:23:09:de:66:bf:93:1d:a8:
         98:70:ef:fe:ad:e8:c0:87:1e:c6:7f:19:6e:4c:7a:54:16:97:
         a4:3d:4b:41:d8:65:23:fe:70:d2:98:04:72:e4:0e:86:db:d5:
         32:08:25:0c:dc:8c:29:c9:88:2f:2a:e5:82:d7:46:5d:37:73:
         78:7e:aa:54:d0:8b:a0:40:26:83:1b:2a:e2:be:fc:81:23:00:
         1a:a8:6e:bb:fb:18:74:ab:ec:b7:0b:5f:96:23:1c:1b:2e:3d:
         cb:f8:2a:ec:ac:61:9a:d2:90:88:9f:89:69:6f:5a:9a:67:14:
         12:fc:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:30 2026 by rpki-client