Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer
File:                     rbkheCH_vuCW4c7EcJijFFokbqA.cer (raw, json)
Hash identifier:          o6mjhFKTWNwek4ypF5ufJU/qElN3i/3dcT8ATnUlXsM=
Subject key identifier:   AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       024B79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Jun 2025 23:32:23 +0000
Certificate not after:    Wed 01 Oct 2025 00:00:00 +0000
Subordinate resources:    IP: 103.110.88.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150393 (0x24b79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 23:32:23 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:d1:95:54:62:bc:ee:83:2f:65:22:c8:32:
                    c4:23:f5:8b:af:ee:03:22:31:4a:09:2d:e9:a9:a9:
                    57:a2:ec:07:07:8f:d9:77:c9:48:c8:88:1d:75:35:
                    ab:8b:f4:d4:17:cd:ab:eb:52:40:ed:98:ba:0b:eb:
                    1b:b6:23:43:cc:21:5b:0f:81:e5:11:3e:22:7a:f4:
                    db:d8:c1:a4:88:3d:b2:54:e3:fc:5e:8b:00:23:f1:
                    8f:6d:59:1d:ed:56:74:c1:5c:3f:6b:44:d1:8b:0b:
                    22:00:67:d3:cb:e5:cc:4a:aa:1f:27:42:13:5f:dd:
                    9f:5e:21:c3:ce:62:a9:23:57:8c:97:42:3a:c4:01:
                    fb:f5:7d:5e:cc:d2:78:78:02:1c:1e:d4:c8:53:4f:
                    c4:4c:60:38:5d:a4:0c:ff:20:f9:f6:6f:50:93:e4:
                    58:8a:b1:ba:f9:23:85:03:59:50:bb:9b:df:6e:41:
                    13:ff:cf:5e:58:48:47:01:c1:b7:2b:46:02:1a:1d:
                    b9:7e:f0:28:4a:a1:da:87:fe:75:24:99:d6:80:33:
                    3b:bf:0b:79:db:72:f9:38:bf:9c:69:cb:71:0a:01:
                    f9:46:e4:dc:1b:65:4e:d9:3a:b8:2d:c2:bf:6f:36:
                    2c:2d:ce:24:75:48:f1:72:85:88:5e:16:d2:ae:ee:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:d8:bc:ed:0e:1e:1d:82:ea:47:ea:02:be:cb:33:c3:3c:
         c4:62:11:99:5b:67:1d:59:78:6c:a4:e0:cc:71:a2:45:c6:fa:
         ce:9c:1e:d6:a6:bb:63:70:33:87:12:b7:01:38:89:8d:92:01:
         a5:bf:c1:2b:75:91:ed:2b:8e:d2:85:34:a4:1e:52:ea:68:51:
         0d:0e:c7:c9:71:68:ef:f8:46:9c:61:57:9a:c2:26:97:92:33:
         6e:1f:6d:f3:d6:f1:81:6a:c4:35:fd:7f:a8:c1:6e:0a:c8:bb:
         53:02:a1:b8:59:77:37:1b:e2:80:fa:37:62:cb:ed:c7:77:96:
         54:75:62:13:b3:cd:f4:f9:35:6a:6b:93:d8:82:08:23:ba:99:
         f3:79:03:c2:38:ae:d8:fb:fa:8d:82:ad:9a:bb:6e:61:07:e4:
         f3:91:5e:37:23:6a:a0:48:ce:9a:4f:a8:0a:28:03:bb:4a:18:
         ef:00:78:6e:9e:a9:ec:6b:1c:07:09:ad:5c:11:d7:9d:b2:7d:
         e3:f0:df:97:1f:bc:d2:37:94:2a:3c:b5:f8:28:2b:dc:1e:76:
         4f:26:bb:b5:c2:fe:5b:d9:d4:2f:5f:74:b9:28:85:bd:c4:21:
         73:f1:0b:85:d0:34:2d:c1:63:81:d4:04:e5:b1:bc:5a:27:4d:
         48:c8:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:21:12 2025 by rpki-client