Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
File:                     npKCbPR9rsiFyZgQKH24bmlXaOo.cer (raw, json)
Hash identifier:          X+IVr5p09ScmpFKB7/1NnLm0AooBxpGrhkItpMf9JGQ=
Subject key identifier:   9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BC29
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 13:38:06 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 137585
                          IP: 103.114.38.0/23
                          IP: 2001:df4:ef00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 20:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179241 (0x2bc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  9 13:38:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:cf:86:83:a5:5a:03:3b:0b:6b:43:4b:49:
                    1b:d7:8e:61:5a:b4:76:d0:65:31:ef:c1:0c:a5:72:
                    2b:44:13:96:d2:33:f1:55:f7:f6:e5:e4:81:5a:ea:
                    3c:c6:51:e4:fc:2a:05:77:7b:92:d9:15:de:b9:18:
                    09:85:67:0b:45:de:ad:a8:7a:39:ea:20:0d:26:cf:
                    32:c3:e9:11:43:39:ee:90:a3:83:9a:ff:f1:fd:92:
                    05:f9:0d:9f:5d:0d:7e:11:d8:8f:af:13:30:a5:df:
                    e3:0e:54:33:a8:48:15:d2:17:4f:86:d5:34:55:ff:
                    f9:25:07:c5:bb:fd:e9:fb:dd:0e:47:0b:65:9f:4b:
                    c9:ce:1e:f9:1c:ac:22:22:3a:55:dd:29:42:eb:cd:
                    5c:7f:fa:0d:98:4f:fe:3c:ae:c8:ca:31:d1:94:73:
                    be:44:41:70:e0:21:c8:6c:d3:9f:27:87:af:09:98:
                    a8:01:fb:32:b7:13:a6:79:63:a5:09:96:4c:54:9c:
                    56:e1:c7:f5:07:70:d0:1d:e1:fd:34:55:87:8c:77:
                    9f:3a:aa:6e:0f:89:bf:de:51:18:58:28:f0:d8:1a:
                    bc:62:d1:be:07:f3:cd:a0:77:4e:28:87:21:9f:42:
                    9b:31:63:23:85:54:db:31:b1:ca:f2:51:9c:28:ab:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137585

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.38.0/23
                IPv6:
                  2001:df4:ef00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:0b:36:9f:85:12:d0:a5:8f:cb:e0:85:f1:e7:65:e0:71:
         fa:d3:0d:18:ce:84:5e:7c:74:cb:bc:c1:e7:aa:06:8e:a8:c8:
         97:94:6c:70:9b:7d:a9:d1:ce:fc:c0:2b:73:5c:89:6c:f7:c5:
         3e:27:35:f6:30:3f:88:cc:a9:7a:21:e4:b2:50:c1:83:2a:f4:
         36:08:6f:aa:73:23:a9:92:f3:53:83:71:3f:63:b5:a8:69:8c:
         f3:19:e0:0c:bf:e2:79:d4:44:59:63:01:2e:e7:47:db:d4:44:
         1b:b1:34:6f:9e:93:20:2b:c0:ee:c9:6e:72:2b:d5:90:34:70:
         75:3a:0d:a2:a2:d9:cb:02:c9:d8:14:03:f0:87:a8:6c:d0:a1:
         cb:24:2e:97:d6:28:a6:92:77:cb:0f:58:de:4f:a5:79:be:40:
         07:22:60:f1:98:9b:b7:3a:0c:c0:0c:da:34:6b:02:a6:d5:aa:
         02:fe:a4:01:e5:7a:46:ea:00:61:d6:9c:0d:04:a1:e9:16:70:
         fd:56:86:7c:1f:20:cb:bc:6f:b8:7f:a2:66:f8:f7:22:2e:b2:
         c4:3d:7b:e1:bb:47:f7:d9:b4:19:f6:16:48:be:32:39:03:71:
         61:36:0f:2b:2a:19:df:ed:d2:bb:36:b6:98:b7:43:17:d5:b3:
         dc:8a:22:2d
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDArwpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwOTEzMzgwNloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgx
MDI4N0RCODZFNjk1NzY4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsg8+Gg6VaAzsLa0NLSRvXjmFatHbQZTHvwQylcitEE5bSM/FV9/bl5IFa6jzG
UeT8KgV3e5LZFd65GAmFZwtF3q2oejnqIA0mzzLD6RFDOe6Qo4Oa//H9kgX5DZ9d
DX4R2I+vEzCl3+MOVDOoSBXSF0+G1TRV//klB8W7/en73Q5HC2WfS8nOHvkcrCIi
OlXdKULrzVx/+g2YT/48rsjKMdGUc75EQXDgIchs058nh68JmKgB+zK3E6Z5Y6UJ
lkxUnFbhx/UHcNAd4f00VYeMd586qm4Pib/eURhYKPDYGrxi0b4H882gd04ohyGf
QpsxYyOFVNsxscryUZwoq8jbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUnpKCbPR9
rsiFyZgQKH24bmlXaOowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg3MDAwLzA2N0Q2RkEyNDc4OTExRTg4OUQ1REI0OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NzAwMC8wNjdENkZBMjQ3ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBS
OXJzaUZ5WmdRS0gyNGJtbFhhT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhlxMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ3ImMA8EAgAC
MAkDBwAgAQ307wAwDQYJKoZIhvcNAQELBQADggEBAIu7CzafhRLQpY/L4IXx52Xg
cfrTDRjOhF58dMu8weeqBo6oyJeUbHCbfanRzvzAK3NciWz3xT4nNfYwP4jMqXoh
5LJQwYMq9DYIb6pzI6mS81ODcT9jtahpjPMZ4Ay/4nnURFljAS7nR9vURBuxNG+e
kyArwO7JbnIr1ZA0cHU6DaKi2csCydgUA/CHqGzQocskLpfWKKaSd8sPWN5PpXm+
QAciYPGYm7c6DMAM2jRrAqbVqgL+pAHlekbqAGHWnA0EoekWcP1WhnwfIMu8b7h/
omb49yIussQ9e+G7R/fZtBn2Fki+MjkDcWE2DysqGd/t0rs2tpi3QxfVs9yKIi0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:26 2026 by rpki-client