Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
File:                     0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer (raw, json)
Hash identifier:          Q7p7bUL/yDr7kwd6gyovSLOguSKRRdGIRAVxcP+ro4Q=
Subject key identifier:   D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B0A9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Apr 2026 12:58:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 132726
                          IP: 103.19.240.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176297 (0x2b0a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 30 12:58:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:e1:ea:4b:16:b8:15:7a:f7:dd:08:44:c4:
                    07:d2:36:96:a3:e2:cd:0c:a9:92:8a:e6:62:9e:b4:
                    02:64:e8:a4:06:42:43:aa:61:47:57:82:1f:3c:5f:
                    17:6e:c5:f7:80:d2:d1:d2:b0:f7:3c:29:06:e3:15:
                    86:0a:3d:84:87:2d:81:e8:7f:3f:57:45:96:34:e1:
                    e9:5f:fa:e2:05:5a:5a:0a:1a:f9:d1:de:b9:00:84:
                    e3:f6:5d:41:5e:a6:0d:f0:6f:6d:17:3a:0e:45:90:
                    0e:05:21:12:11:78:3f:50:b3:45:49:f9:c9:e2:32:
                    2d:a0:cb:00:ae:6d:ca:23:57:65:28:58:f5:24:8a:
                    57:5e:9f:34:25:eb:2c:ed:51:73:87:5a:51:5b:54:
                    db:8f:73:b1:19:58:86:e8:16:6f:47:f3:b4:0b:06:
                    42:6e:b8:c2:0a:6a:0d:88:5e:d9:c2:55:5e:1f:bd:
                    41:ca:f8:ef:39:6c:d1:5e:36:de:2d:30:ee:df:d7:
                    65:b5:dd:c4:2d:83:52:be:ac:9d:4e:3a:6a:86:5c:
                    6e:2c:05:d4:a1:6f:85:4e:d2:3a:b0:ca:3f:20:c7:
                    55:89:fa:cb:bf:72:c2:ed:91:8c:a5:14:7c:04:13:
                    f3:b1:26:f7:3d:a9:06:53:19:7c:be:ba:f9:4f:c5:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132726

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:29:8a:a1:77:86:e0:78:63:55:83:df:3e:59:2e:df:eb:7a:
         a6:69:73:3a:51:18:5b:c7:95:01:b3:a9:1f:d8:6b:07:20:57:
         98:13:0f:32:52:3a:cd:c4:ab:87:56:8d:14:2d:a8:6e:fd:74:
         db:04:57:d0:da:f6:d0:85:74:8b:16:bd:2a:cf:fb:e9:b0:d2:
         cc:bb:ac:a6:86:41:ef:1a:46:8c:f9:da:46:b6:eb:cf:aa:48:
         d0:5b:b6:92:dc:9c:38:92:19:8c:63:f9:87:5d:6e:ec:a9:41:
         6d:3a:cc:73:fc:33:18:9b:c1:e3:a6:ee:2c:66:2c:6f:a3:e5:
         53:1a:6f:6a:f6:2b:a3:64:a3:f4:3f:6a:a2:55:c4:d0:c9:35:
         4a:01:27:a2:1d:99:c4:2d:b1:02:cc:1c:78:6a:c3:a3:ce:78:
         29:40:2e:57:d1:a3:2d:32:15:fc:d3:ec:aa:cd:69:45:82:8d:
         72:b6:15:b3:95:08:b5:dc:ea:a6:7c:f3:a7:76:1b:c6:c8:42:
         32:d2:86:da:d7:86:d6:20:aa:98:66:83:19:60:db:f8:bf:38:
         e4:28:5d:a3:6c:ec:be:23:bf:94:03:e7:81:6e:5c:f8:0a:ff:
         f5:fb:a2:b8:e5:54:3a:a3:40:f8:c7:dd:89:78:80:0a:66:b7:
         d2:cf:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:42 2026 by rpki-client