Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Mz80AYPeagpZFcGqUPzbaDUrdU.cer
File:                     -Mz80AYPeagpZFcGqUPzbaDUrdU.cer (raw, json)
Hash identifier:          os4XjsPR5JJMjMkb63lU/A1gkqP3KJcKsrCxbSU9dJM=
Subject key identifier:   F8:CC:FC:D0:06:0F:79:A8:29:64:57:06:A9:43:F3:6D:A0:D4:AD:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02CC42
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9130934/73406B78949011F1B61D43BB6611F970/-Mz80AYPeagpZFcGqUPzbaDUrdU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9130934/73406B78949011F1B61D43BB6611F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 10 Aug 2026 07:52:39 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 203.30.155.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183362 (0x2cc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 10 07:52:39 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9130934, serialNumber=F8CCFCD0060F79A829645706A943F36DA0D4ADD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:4c:32:01:5d:96:6a:db:2a:c3:55:01:8c:
                    88:e2:05:97:7e:79:ab:c0:5e:3b:ce:f7:e2:32:cb:
                    2d:07:d9:e8:27:f8:f6:c7:be:2b:ee:3e:19:02:83:
                    bb:ef:b9:1c:4b:8b:f4:9c:72:72:b2:ab:60:84:fb:
                    27:65:4c:c4:9b:ab:2e:b4:5b:3e:39:59:45:90:ae:
                    73:af:3c:74:2d:27:b6:48:8c:00:4a:97:4e:a3:bd:
                    09:c2:b4:b4:ab:2d:d6:f5:18:46:e5:09:9e:1b:04:
                    c9:3b:98:73:03:2b:8b:b2:4e:0b:eb:4e:62:7d:a3:
                    dd:a3:1e:4a:fc:9c:06:7b:70:b4:97:63:a8:00:c9:
                    9e:4a:27:8c:a3:38:6f:32:8a:0f:dc:81:83:7a:f8:
                    47:39:af:66:d6:3b:bf:3b:6a:a3:69:0b:f3:df:8f:
                    06:ee:e6:2b:5d:3d:c9:aa:c1:70:f4:0b:23:4c:f3:
                    0c:97:6f:4c:6d:e3:96:ce:00:12:90:5f:a8:b7:dd:
                    5f:06:63:a4:f8:f8:8a:bf:c2:18:6d:c6:d4:e8:1f:
                    8b:7e:68:96:fc:f8:5b:f3:cd:ff:60:11:25:66:8e:
                    b9:4d:c3:d0:83:f5:98:0c:1b:0d:16:eb:55:59:49:
                    d6:2e:2e:b6:41:c6:0d:9f:71:e5:29:ef:80:cb:ea:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:FC:D0:06:0F:79:A8:29:64:57:06:A9:43:F3:6D:A0:D4:AD:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130934/73406B78949011F1B61D43BB6611F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130934/73406B78949011F1B61D43BB6611F970/-Mz80AYPeagpZFcGqUPzbaDUrdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:12:ce:c6:df:bf:1a:f9:bf:76:b8:45:7b:d7:1c:79:8e:
         c6:a8:3c:9a:a0:16:c6:0a:d3:8b:47:77:fd:8f:93:2c:d6:e8:
         0d:20:0c:44:43:83:07:ba:92:0f:1c:a1:08:0c:a2:0f:6b:b8:
         62:1c:4e:13:95:86:c3:ee:4e:94:e1:50:1c:a7:61:7e:d3:ad:
         11:23:4a:3e:62:3e:1a:76:56:bd:6b:5c:d1:c5:25:96:b6:1e:
         6b:b6:a8:e7:ec:fb:fc:a9:d6:31:6b:4f:86:06:26:0e:5d:58:
         d3:61:50:dd:42:8d:0c:df:89:db:4f:a9:eb:cc:7f:ae:14:1f:
         c7:2a:1b:66:b8:3e:31:c0:6d:78:e8:b6:ac:a2:f9:32:b8:cd:
         ae:79:2a:a2:6c:1b:ca:62:90:f7:60:f2:9b:2d:46:d2:d2:2f:
         14:88:60:4f:74:c6:11:23:a2:03:b4:0e:41:bb:e3:8e:a3:b6:
         77:5d:23:aa:56:83:1e:44:b0:a0:cf:24:50:4e:63:93:6d:f9:
         ec:44:27:43:95:fc:b2:ac:b9:57:fe:09:77:c9:3e:fb:6a:71:
         e4:82:44:e8:e3:be:0a:3d:90:43:c3:79:d4:04:2c:02:6f:66:
         d2:7f:9a:5c:17:7e:8a:74:62:ac:fd:3c:0e:43:99:ad:a7:a4:
         df:22:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:53:33 2026 by rpki-client