Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.cer (raw, json)
Hash identifier:          rKgIu5iJF85EqUQsZyYn0IiuQ62KqXcVn+VTyV4wlqs=
Subject key identifier:   B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D704
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 18 Sep 2026 13:54:13 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 141772
                          IP: 103.120.176.0/22
                          IP: 2403:5ac0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 09:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186116 (0x2d704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 18 13:54:13 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:ee:1a:3a:14:26:77:7b:fb:d9:1f:06:61:
                    a2:18:e5:fa:51:bd:c6:2a:e2:25:3e:39:8c:94:38:
                    00:11:73:2e:03:38:f9:1b:41:e3:70:4a:5c:22:43:
                    cd:6f:43:64:83:ed:10:44:99:d0:97:0b:a1:7b:28:
                    65:0d:63:80:ee:7b:06:a5:f0:38:41:e1:f6:3d:74:
                    4d:62:80:93:07:48:85:0e:30:d3:5d:49:a3:58:4a:
                    aa:76:d0:cf:9a:8f:ae:38:d8:ec:3d:1f:f6:db:4a:
                    7e:bd:ac:b2:8d:09:cb:5d:79:61:8d:f8:fe:26:09:
                    4f:77:f8:18:df:ec:00:e0:1a:ac:ba:31:4e:1b:7f:
                    f6:34:5f:66:3b:af:0d:29:f5:87:d8:5a:2b:2f:3f:
                    e8:ec:4d:c3:bf:6d:d2:d2:d1:fe:83:9e:ef:8b:3c:
                    1e:33:f2:d1:16:03:87:89:44:a3:c9:f7:94:51:66:
                    81:d0:a1:6a:64:f8:cf:52:99:41:b2:31:c8:98:ce:
                    8d:14:fd:d7:c7:2a:fb:84:6c:8d:90:62:b1:21:a9:
                    52:53:51:fa:cd:69:68:fc:cf:95:74:c1:3e:93:30:
                    d4:a8:ac:75:b2:f0:9d:36:b8:9b:75:49:7f:6e:2c:
                    86:b7:d2:f8:c7:f9:6e:60:c4:ad:0c:df:97:8c:d4:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141772

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.176.0/22
                IPv6:
                  2403:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:00:03:3d:73:ea:54:db:f5:83:e8:4d:ee:cc:35:c7:c1:44:
         be:b8:b3:93:da:a8:7d:dc:e2:6e:d3:c3:cf:83:9d:9d:79:6b:
         5a:e0:5e:5f:ab:d2:5b:ad:de:04:16:86:83:ef:15:28:7a:41:
         ad:66:cf:cf:3c:9e:68:10:d7:ec:1b:b0:d5:ca:6f:c9:2a:44:
         63:be:c7:7d:a1:65:b7:6f:2b:62:49:86:b7:4c:1c:18:52:e5:
         11:d4:35:d4:d4:5d:55:41:22:42:6a:5e:e8:a7:d5:43:c7:9a:
         6b:8a:a3:3f:fa:41:29:49:2f:50:6d:7e:bc:2b:d5:b5:8d:c7:
         bd:ad:63:6e:ec:c6:b2:ca:ea:f6:99:ce:64:76:a9:a0:24:30:
         7e:73:24:4a:fe:ca:3a:42:51:6d:3a:4d:b1:b9:99:a3:8a:e1:
         0b:17:e6:a4:2b:41:17:e4:13:af:71:8f:c6:81:01:17:1b:75:
         f5:3c:0c:32:44:c9:08:4f:fa:41:aa:00:96:0d:c8:61:18:4d:
         b2:e4:e9:78:04:62:4f:87:2c:88:0a:a0:04:cd:4f:53:b9:b3:
         bf:28:f2:b1:26:88:58:98:91:49:58:8c:3b:23:49:f9:02:f8:
         c2:06:da:c9:32:fc:dc:d7:4b:38:fd:d0:ef:15:16:44:1b:04:
         bf:4f:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:49 2026 by rpki-client