Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.cer (raw, json)
Hash identifier:          4+VfOiC6NWGGuL+nIjaaIKnzvr0+y88hlCsUnfzG/Is=
Subject key identifier:   98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0291A6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:05:46 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 135023
                          AS: 153979
                          IP: 103.206.32.0/22
                          IP: 182.161.56.0/22
                          IP: 2402:9740::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168358 (0x291a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:05:46 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:5b:ac:4d:f7:26:4d:2b:df:4f:73:a5:d4:
                    16:9b:d9:93:c7:cc:70:32:8a:79:63:d9:72:d8:86:
                    9b:9b:d2:1d:22:8c:47:8e:38:6c:ba:91:14:30:d0:
                    94:b9:42:dd:b9:b8:b0:a1:0d:a6:82:9d:2a:61:28:
                    a8:ab:62:3f:56:ef:58:8d:db:7c:53:39:dc:ad:ac:
                    26:be:b6:f0:de:75:25:6a:78:23:81:54:58:57:e6:
                    7a:e4:61:fd:d5:26:0b:f9:b7:6c:b1:a0:b4:88:23:
                    92:f8:c9:2f:32:43:04:38:45:1a:77:37:54:b4:5a:
                    bb:fb:71:2e:d2:0a:dc:52:32:bd:a8:be:ab:e1:de:
                    21:42:e2:ed:bf:a2:8b:4d:a9:16:52:d1:31:32:39:
                    75:43:4a:58:72:37:0c:b9:7b:ed:a0:16:af:42:b1:
                    42:36:cd:09:99:4f:fc:78:9b:f7:56:b5:62:af:32:
                    19:1b:3c:fd:a2:e1:3b:5c:cd:65:0e:fc:2e:c5:a2:
                    28:8b:7d:89:e9:05:97:c8:e6:cb:03:2c:0c:8c:2f:
                    b8:53:4e:bb:be:16:cc:13:75:03:f7:57:d7:93:cd:
                    15:ad:ed:3a:2b:34:5c:7a:8d:db:48:4d:1f:5f:82:
                    02:51:ba:27:b2:40:0d:fa:fb:f6:32:46:c7:93:2b:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135023
                  153979

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.32.0/22
                  182.161.56.0/22
                IPv6:
                  2402:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:db:32:3a:3a:7a:f7:ea:53:2d:a4:3a:0d:d3:91:91:e8:
         0b:b2:b7:b1:79:53:a8:29:e6:b9:5c:53:a9:09:82:80:8e:d2:
         2b:b1:fe:4c:6b:8c:c3:45:96:fe:ea:3d:c5:85:8c:e9:d8:82:
         69:33:60:1c:f3:46:5e:c6:47:fb:c8:ac:b8:9b:bb:4e:e0:c5:
         57:93:8f:ba:fb:b7:16:4b:44:48:72:8e:d8:52:61:d2:5a:cd:
         8c:2d:9c:27:a7:5f:5e:b2:bc:c6:d8:2b:a9:1e:15:5c:c6:5a:
         c5:0c:6b:28:22:b6:ae:14:cb:95:fe:d8:5f:31:36:af:38:8e:
         3e:6c:ab:da:5d:99:90:0f:af:94:bf:c6:14:40:16:5f:fa:9d:
         b3:5e:54:b6:39:91:4f:df:0b:6f:32:51:03:a0:ab:a9:5f:fd:
         06:53:e7:10:5f:96:cb:14:fa:a4:d4:a9:df:c2:21:75:9a:12:
         98:40:0b:de:54:d3:b2:b0:66:5c:5b:d6:4e:ee:31:36:f1:70:
         0b:0f:dc:76:dc:63:b5:52:37:df:53:c2:f1:60:f3:65:77:97:
         07:c3:a6:e9:cb:51:55:38:b7:94:49:bd:c8:26:3e:71:c7:c0:
         dd:11:1f:0b:d6:71:5c:84:df:ec:13:f2:95:81:92:ac:4d:fa:
         f6:23:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:52 2026 by rpki-client