Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEluAiebWir0aHNMl5RX2ZtNnUc.cer
File:                     kEluAiebWir0aHNMl5RX2ZtNnUc.cer (raw, json)
Hash identifier:          gBYfRIjTTOWWnwdUFI/CulKa4C/wzHdfNj/zibM+aR4=
Subject key identifier:   90:49:6E:02:27:9B:5A:2A:F4:68:73:4C:97:94:57:D9:9B:4D:9D:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D4DB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91738A3/A8665CE4AC1011F1824338687011F970/kEluAiebWir0aHNMl5RX2ZtNnUc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91738A3/A8665CE4AC1011F1824338687011F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 09 Sep 2026 05:38:22 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 150743
                          IP: 103.77.236.0/23
                          IP: 2001:df1:e440::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185563 (0x2d4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  9 05:38:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91738A3, serialNumber=90496E02279B5A2AF468734C979457D99B4D9D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:dd:00:eb:3c:00:32:ac:d5:80:e0:82:18:
                    1f:b6:6e:4c:b6:af:d0:aa:be:90:b3:53:c2:f2:f1:
                    c1:3a:00:56:8b:ea:73:d7:38:35:b7:07:c7:94:3d:
                    fa:f5:17:b2:20:b5:ab:af:d8:65:d0:6c:9c:36:e5:
                    05:fe:ce:16:a1:52:d9:f9:d3:f7:f9:e2:48:4b:9f:
                    3c:46:49:c3:2f:0c:c2:ff:4b:77:fd:a3:0e:e0:e9:
                    64:55:68:a3:0d:9c:a3:bf:1e:34:7d:a2:9b:8c:8d:
                    30:44:04:c2:5f:bc:84:b9:64:6d:30:11:39:fa:59:
                    58:f5:da:81:e0:ea:ce:f6:c1:ba:7f:5d:47:7b:e0:
                    5c:af:42:15:7d:90:11:2a:29:92:cc:cf:f2:16:92:
                    22:c0:05:ed:cf:c6:5f:35:19:9b:58:94:c0:e8:42:
                    5a:a4:e5:d0:2a:eb:80:47:60:09:7a:8c:e7:63:70:
                    ba:f7:fd:00:61:21:0a:d5:e7:6d:99:ec:cc:e0:8a:
                    c0:c0:bb:8e:ab:59:66:6c:97:5c:43:d7:a1:e5:d9:
                    e6:43:43:ca:09:37:68:6f:c5:18:13:87:ba:75:62:
                    fb:b7:78:25:15:29:f0:1e:e4:0d:8d:68:7f:c2:2a:
                    fb:10:06:93:e9:d3:96:01:85:0c:ca:70:fe:29:40:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:6E:02:27:9B:5A:2A:F4:68:73:4C:97:94:57:D9:9B:4D:9D:47
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91738A3/A8665CE4AC1011F1824338687011F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91738A3/A8665CE4AC1011F1824338687011F970/kEluAiebWir0aHNMl5RX2ZtNnUc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150743

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.236.0/23
                IPv6:
                  2001:df1:e440::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:42:45:35:c3:91:65:07:14:6e:a6:8e:be:58:a9:b9:cb:
         ae:b9:96:80:83:ee:8f:3f:d6:b8:e2:b6:04:3d:14:e2:87:60:
         35:62:ce:15:ac:ba:55:a5:30:28:11:9b:33:4e:d1:e8:08:e6:
         f0:cc:66:69:eb:5b:c3:c8:4a:c1:0e:38:7c:42:82:c8:33:b9:
         13:c5:93:69:f3:ae:d3:46:21:55:fb:35:0a:ef:7d:6d:8f:6c:
         d7:37:c7:31:e5:a3:f5:7c:25:de:82:de:94:b4:be:ae:56:3d:
         09:22:54:89:74:b7:b9:e2:42:11:69:a7:6c:f6:cd:26:89:43:
         1b:d7:5e:f8:dd:51:d1:05:4d:2a:39:79:4e:a8:c0:8d:0e:a4:
         95:66:8f:03:f5:e8:3a:8e:d7:8c:2b:cd:47:a2:ce:0e:bc:cb:
         56:48:6d:86:7e:84:ab:f8:47:25:7c:18:83:a6:ac:5e:64:f8:
         51:1d:27:55:3a:df:1b:8b:af:21:17:d6:2d:90:11:21:d9:06:
         d5:5b:5c:fd:76:cd:2f:4b:ba:ad:87:1b:a7:ee:b0:62:ef:eb:
         ee:61:ab:51:4a:e8:4f:a9:93:df:79:60:be:0f:2e:ad:6b:b8:
         f9:6d:5a:b1:75:bd:df:c0:a9:39:57:98:02:55:40:d7:93:49:
         9b:15:0f:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:48 2026 by rpki-client