Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
File:                     gtgYhh3Upw93CNIF5LiehRTKH2w.cer (raw, json)
Hash identifier:          92J2uEq9Cr0XFKmyTzNiBXXwlqCHxsM+FABAT7csY+8=
Subject key identifier:   82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C259
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 02 Jul 2026 14:47:56 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 135594
                          IP: 103.67.165.0/24
                          IP: 103.152.4.0/24
                          IP: 2001:df3:4a00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180825 (0x2c259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  2 14:47:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:b8:58:95:2b:f0:84:00:c5:e6:48:a1:10:
                    f5:b1:ba:4a:54:48:cf:df:6f:5c:68:89:ae:92:5a:
                    df:de:bf:33:17:a0:23:2a:2f:8e:16:74:cc:fa:1e:
                    d8:af:61:9b:6a:8c:c5:36:61:d7:14:8c:df:07:90:
                    1c:65:0e:c2:83:40:c5:3b:77:5b:55:f9:83:fb:5c:
                    79:34:90:a5:1b:ea:9c:fa:36:f9:e5:8b:2b:e6:38:
                    f8:28:27:39:09:2b:ac:c3:2e:ec:b1:ca:9c:81:ba:
                    58:d3:54:1c:b3:6b:f0:ab:16:5b:42:6e:3d:8a:8e:
                    f1:e7:7c:c8:3f:a4:33:b3:d2:75:a3:0a:12:cd:1f:
                    05:b2:33:f1:01:0d:95:2c:cc:72:ea:19:68:f1:89:
                    fc:cd:c5:5d:51:e4:ea:fc:0b:f3:8e:43:69:11:98:
                    e8:5b:aa:f1:5e:26:c1:c4:9c:8e:df:9c:e8:0e:79:
                    61:f2:9d:cd:5e:6e:2b:f5:d2:cf:f4:b2:59:28:94:
                    d1:ae:fd:ac:7b:2e:56:62:83:79:02:8d:83:c8:c7:
                    e7:dd:ea:a5:72:90:34:5c:43:6e:e1:f3:f8:5e:34:
                    d8:16:ab:3a:15:74:03:2f:24:b6:70:e7:14:07:3f:
                    2d:97:c8:23:bf:fc:d8:a4:5a:d8:65:65:d7:a6:0f:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135594

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.165.0/24
                  103.152.4.0/24
                IPv6:
                  2001:df3:4a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:0b:3e:be:9a:63:5b:7a:d9:34:76:0e:fb:e1:6b:bd:ef:
         b6:c4:a5:88:56:d0:f0:f0:a3:95:ab:98:61:b6:00:e3:00:7c:
         a2:71:1f:6a:6f:53:e0:0e:0f:2b:7f:4d:c5:d3:5b:56:ec:5d:
         1b:df:38:2e:a0:f7:f2:0e:76:55:2e:ee:2a:2b:b6:29:13:4f:
         85:93:0c:23:a9:b6:b3:a6:e5:35:7d:c7:5f:40:45:e7:f6:8c:
         a3:1d:58:1f:8e:26:90:8b:7b:3a:f6:a4:d1:fe:44:f1:a1:e4:
         75:ff:89:a4:2d:99:eb:a4:c6:57:6f:d1:fa:1e:59:47:aa:fd:
         4a:8a:d9:8a:f6:30:81:34:da:76:98:0f:5b:7b:a4:6a:d8:a4:
         b6:f8:63:46:08:43:59:84:83:e1:f7:81:50:14:8e:7d:1f:58:
         a5:5b:1b:37:ea:b7:ed:a3:b8:bc:ee:e3:72:6b:16:be:8f:8f:
         77:11:37:d3:30:ce:85:a3:da:1b:30:91:38:24:78:99:ba:63:
         a9:8c:1f:4a:08:d8:8b:8a:59:be:47:06:15:07:cf:d6:aa:3e:
         4c:de:3a:91:36:43:ca:14:44:57:e3:01:b2:92:71:a6:94:03:
         91:40:f8:f7:03:d0:fd:3b:c0:95:9f:44:2f:a6:28:09:10:04:
         b0:9c:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:48 2026 by rpki-client