Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
File:                     je6uhW6V886s4RLAoeqXukWlekQ.cer (raw, json)
Hash identifier:          3+8l4xXNxOXhKBFUFzmytdIZ8qQeDYC0rWV9lw2NL5Q=
Subject key identifier:   8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029310
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:13:20 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 45648
                          IP: 27.34.240.0/20
                          IP: 43.254.160.0/22
                          IP: 103.228.220.0/22
                          IP: 111.125.192.0/23
                          IP: 111.125.200.0/21
                          IP: 111.125.212.0/24
                          IP: 183.87.212.0/23
                          IP: 183.87.250.0/24
                          IP: 203.201.60.0/22
                          IP: 2400:d280::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168720 (0x29310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:13:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:86:91:5c:72:1a:cb:9b:ac:4c:f1:cc:d9:
                    99:fe:39:01:f5:37:f0:04:bf:85:7c:b3:ea:a0:9a:
                    48:3a:6b:05:d2:f6:73:ea:c3:d4:6f:30:5e:dc:a0:
                    81:25:6b:94:08:93:18:64:10:b9:a6:02:b3:7d:d3:
                    35:e9:bd:bd:be:a6:e9:75:85:7c:d5:d2:69:e3:71:
                    54:5d:ef:6b:3c:05:08:17:d0:d1:fa:8b:31:0f:e2:
                    91:ee:87:e6:a5:70:6f:7a:4b:f6:d0:6c:6e:dc:0e:
                    f9:12:7f:79:63:f0:80:6e:aa:6e:0b:a0:f8:a5:5d:
                    5d:6f:27:63:9b:97:a3:b7:b4:95:41:d1:fb:bb:f7:
                    dd:bd:e0:4f:19:82:f2:2b:f3:6f:32:d3:1f:d4:99:
                    d5:c4:85:8e:fa:15:0f:46:8b:08:d9:94:03:84:bf:
                    98:22:08:9f:fb:b7:26:52:b4:74:c5:a2:69:92:83:
                    2c:af:08:50:59:11:45:67:c6:d8:75:c7:b4:09:95:
                    0c:22:6b:3c:4d:4a:26:16:b9:d4:a7:20:e6:0b:d5:
                    f9:e0:d6:70:df:9e:89:e6:14:9a:3e:3d:1b:2d:b1:
                    11:3f:83:65:cc:e6:28:1d:64:ed:8e:bd:15:fb:03:
                    47:82:f2:95:64:4a:4d:a6:f6:24:2c:9d:a6:82:6f:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45648

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.240.0/20
                  43.254.160.0/22
                  103.228.220.0/22
                  111.125.192.0/23
                  111.125.200.0/21
                  111.125.212.0/24
                  183.87.212.0/23
                  183.87.250.0/24
                  203.201.60.0/22
                IPv6:
                  2400:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:45:2c:b7:aa:4a:9e:4b:73:7b:05:3e:d0:1c:cf:07:72:44:
         9b:25:44:1c:46:e8:ef:40:71:6d:93:a8:95:93:34:ff:00:db:
         4d:4f:39:91:5a:21:60:d0:89:46:48:78:f5:b5:06:0a:40:20:
         6f:eb:54:5e:d1:99:9a:30:5e:fa:ae:ee:01:8e:02:49:63:6f:
         0a:cc:11:b3:87:af:33:36:7e:81:8a:a7:13:2b:a8:d6:06:c5:
         36:de:ed:98:0d:e9:be:8b:58:70:71:a6:9c:27:b0:d3:98:65:
         56:77:d9:ec:b0:a4:ef:73:d5:16:be:46:55:6f:2f:c0:23:11:
         ed:9c:89:99:ad:e2:3e:e6:72:92:5f:f4:46:e5:39:0c:08:d0:
         b7:33:25:97:ed:b7:43:33:23:28:38:a6:a1:9e:1d:a1:64:5a:
         78:50:bd:35:04:df:fb:06:aa:f8:7e:1c:79:b5:d6:0d:2d:b2:
         a5:48:ce:40:0e:33:db:63:f3:ce:fb:5d:13:76:27:51:22:e7:
         9c:8e:dc:65:81:f2:d4:4f:c1:ea:90:d2:6e:1a:53:84:38:3f:
         cb:b5:2f:2d:cd:63:3a:9d:8f:11:b4:83:4a:38:f2:ab:07:13:
         0f:e8:50:63:3f:ce:91:7a:46:1f:cf:f7:1f:8f:ea:73:c7:26:
         c6:e7:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:10 2026 by rpki-client