Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
File:                     moOQ_87kYoLKpxzdePBmlPjT1bY.cer (raw, json)
Hash identifier:          osPNvaGijxuVmdokbIZYVNY5BkVPqVY7OIO+UJR5auE=
Subject key identifier:   9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BBDF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 08 Jun 2026 13:45:30 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 142149
                          IP: 103.166.236.0/24
                          IP: 103.167.181.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179167 (0x2bbdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  8 13:45:30 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:2e:c8:ee:d2:29:f6:b6:0b:c1:33:91:fe:
                    ef:b1:61:1d:ab:df:ea:89:5b:89:b6:d2:05:c3:53:
                    93:a1:1b:9f:3d:49:6b:e2:c3:6f:7a:ea:dd:e8:a9:
                    3b:87:38:bc:f6:df:f2:1a:42:c6:44:92:fe:77:8c:
                    8c:81:7b:fd:6b:5c:94:19:87:ec:f8:2a:79:b1:f2:
                    1d:7c:67:bd:d7:cb:69:f3:40:f0:44:37:1c:93:f0:
                    56:83:5d:b4:fd:8e:72:4e:24:a2:f6:29:5d:42:d1:
                    de:a1:a6:af:81:4b:6f:4c:46:c4:2f:9d:42:93:a3:
                    f5:eb:4c:4d:0b:e9:cd:d5:cd:d4:be:5f:16:11:51:
                    06:6f:60:d0:d5:30:af:79:1b:f5:02:f7:a4:97:01:
                    70:db:f8:d2:1c:8c:b5:e0:32:d5:ba:98:86:78:2e:
                    ba:16:d3:46:18:ca:2d:77:00:80:ed:ed:fe:c8:0a:
                    74:87:de:0e:58:7a:68:9f:a0:1c:7c:7b:7a:16:63:
                    2d:4e:52:f1:0b:ee:61:32:a3:75:5d:cd:e4:da:a0:
                    5c:5a:16:0e:33:2d:98:5e:1f:07:b1:3b:39:55:eb:
                    9c:b8:44:e9:ce:41:89:70:1d:4c:8e:e8:f9:92:e3:
                    5b:f6:07:72:fe:44:ac:a3:72:ae:5f:1d:80:a9:93:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142149

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.236.0/24
                  103.167.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:53:d9:c0:8e:1a:29:f3:10:bb:a9:7a:1d:a7:cc:9a:c1:b6:
         2a:20:ce:59:c8:0c:7f:03:e6:ce:ff:6d:2d:93:b6:12:05:98:
         2b:ed:78:a4:4b:8f:5b:9b:40:ad:dd:53:8a:ff:91:6b:50:bc:
         d6:5a:1a:ed:61:16:38:ce:95:9f:68:24:a9:a2:38:39:b3:0e:
         d8:24:bc:5b:5a:2b:d7:b0:4d:c5:4f:61:c3:b8:14:ce:c0:dc:
         5c:58:0f:ac:29:89:ef:5b:cf:7c:38:af:05:b0:a8:46:3e:06:
         d9:af:9c:91:53:24:63:1b:77:4a:1f:93:04:08:21:2b:45:98:
         b0:ea:f2:79:11:1e:51:6e:70:81:74:83:50:3e:f7:86:27:49:
         91:20:1e:4a:8e:68:3c:f1:21:26:dd:3c:97:ec:3e:d5:71:c6:
         36:da:a3:8a:f4:df:0d:7b:97:cc:55:ec:b7:3a:25:6f:11:8f:
         18:98:23:5b:b1:08:06:e5:3c:dd:a4:33:4e:7b:96:bf:c0:40:
         c2:ad:17:7d:49:58:9b:ff:fc:60:34:58:6b:60:3b:2a:eb:7a:
         64:e5:42:f6:9a:56:ce:0a:6e:37:3c:ef:13:fd:b8:bc:c9:e5:
         1e:ee:7b:ab:37:e1:38:26:dd:6c:11:09:29:d0:d1:d0:17:74:
         96:6a:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:53 2026 by rpki-client