Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
File:                     2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer (raw, json)
Hash identifier:          MH0+dS4FRRW/U+SDU9jTnkTw7lrTvNNQrm2n/kuplmo=
Subject key identifier:   DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       026CBE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Oct 2025 11:42:25 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 150370
                          IP: 103.19.50.0/23
                          IP: 2001:df1:61c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 18:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158910 (0x26cbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 15 11:42:25 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:94:8c:f9:62:2f:c5:25:e7:c4:18:33:a1:
                    66:3e:1c:17:46:78:c0:d0:c6:64:64:2d:b7:ab:26:
                    28:54:e6:24:89:e2:75:21:9b:a2:31:0f:75:0c:a6:
                    bb:37:17:da:91:92:6f:1f:61:f7:99:2a:47:f6:39:
                    e2:7c:e1:3b:23:92:b5:b0:a1:01:fc:82:5c:f1:0d:
                    2d:74:22:33:0e:bc:66:56:e5:73:72:b5:f9:9f:fd:
                    16:ce:f8:bd:c9:a6:56:2e:fc:71:72:bb:b2:4d:5c:
                    97:f6:a5:b0:ea:d7:6f:db:96:23:ea:df:b1:37:40:
                    ad:e8:c1:6e:41:ee:49:54:28:a2:3e:0b:9d:33:dd:
                    17:9b:f6:4f:fb:d5:be:db:61:b2:35:0a:a2:a9:8c:
                    7f:b6:08:cb:e6:7b:bf:e3:78:74:e8:5c:09:80:50:
                    c3:53:3c:67:f1:b2:28:1d:39:58:cb:1c:b4:85:1c:
                    c7:9a:5a:5f:47:33:10:5c:6b:2a:85:5a:ec:69:75:
                    00:3b:2d:4b:ad:e8:f4:24:c5:ce:7b:09:a8:ac:be:
                    3c:28:ac:6d:09:bd:c6:96:97:4c:6e:9d:d7:d1:03:
                    2d:d3:21:26:17:00:fd:2a:dd:98:eb:f4:ef:09:2f:
                    eb:17:23:51:54:79:d2:fd:d4:fa:fb:1d:7d:38:b5:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150370

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.50.0/23
                IPv6:
                  2001:df1:61c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:17:4b:72:a3:b4:f5:c0:a6:2f:e1:d5:46:0c:60:dc:40:
         31:34:e2:3d:e6:8e:0e:58:fe:f9:80:54:ba:87:20:f8:1b:09:
         63:b7:7f:97:f0:6b:a9:c7:2e:9c:06:32:04:85:8e:bf:d4:8f:
         c8:7e:e8:d0:fd:ef:4b:e3:4f:a5:90:35:8d:a4:2e:b9:cf:c5:
         db:95:90:34:7b:c9:f3:d1:e0:fa:55:c6:cf:c4:b2:45:25:26:
         83:7e:be:32:a1:98:05:1e:f0:fb:22:f5:6b:5e:10:59:1e:72:
         e1:89:28:fe:20:8c:1b:79:2d:13:b0:45:78:17:f3:5c:af:f2:
         d6:1d:cc:ea:bc:00:9d:73:bf:07:c6:4d:fc:a7:67:23:48:ad:
         00:15:03:4a:99:47:71:4e:64:1d:05:b5:fa:d6:05:b0:f9:77:
         1d:3c:26:fd:f0:5a:4c:8e:99:13:c3:ac:02:a0:d4:75:6c:d6:
         69:7e:d9:45:8c:96:57:04:39:6c:1e:d9:a8:b4:36:23:fb:7b:
         bd:18:e4:09:bc:af:d9:f1:7b:e7:2c:22:18:39:e5:a2:a3:09:
         94:15:63:f9:62:5a:b1:53:7f:2a:04:24:0e:71:1f:4d:b3:0c:
         1f:aa:a6:3d:c0:d7:b6:92:1f:41:f0:f5:58:cf:90:38:77:dd:
         4d:c9:3a:54
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAmy+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAxNTExNDIyNVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTgwMkMxMTAvBgNVBAUTKERBMEE1MUJBMjYzMTU3NzlCRjZGODNF
RkYwMzRGMjYwMTA1QzUxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiyZSM+WIvxSXnxBgzoWY+HBdGeMDQxmRkLberJihU5iSJ4nUhm6IxD3UMprs3
F9qRkm8fYfeZKkf2OeJ84TsjkrWwoQH8glzxDS10IjMOvGZW5XNytfmf/RbO+L3J
plYu/HFyu7JNXJf2pbDq12/bliPq37E3QK3owW5B7klUKKI+C50z3Reb9k/71b7b
YbI1CqKpjH+2CMvme7/jeHToXAmAUMNTPGfxsigdOVjLHLSFHMeaWl9HMxBcayqF
WuxpdQA7LUut6PQkxc57CaisvjworG0JvcaWl0xundfRAy3TISYXAP0q3Zjr9O8J
L+sXI1FUedL91Pr7HX04tRMZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU2gpRuiYx
V3m/b4Pv8DTyYBBcURkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4MDJDLzAyMzQ1Rjk0QTlCQzExRjA5NzU2NEQxQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFODAyQy8wMjM0NUY5NEE5QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZ
eFYzbV9iNFB2OERUeVlCQmNVUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAktiMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZxMyMA8EAgAC
MAkDBwAgAQ3xYcAwDQYJKoZIhvcNAQELBQADggEBAI/gF0tyo7T1wKYv4dVGDGDc
QDE04j3mjg5Y/vmAVLqHIPgbCWO3f5fwa6nHLpwGMgSFjr/Uj8h+6ND970vjT6WQ
NY2kLrnPxduVkDR7yfPR4PpVxs/EskUlJoN+vjKhmAUe8Psi9WteEFkecuGJKP4g
jBt5LROwRXgX81yv8tYdzOq8AJ1zvwfGTfynZyNIrQAVA0qZR3FOZB0FtfrWBbD5
dx08Jv3wWkyOmRPDrAKg1HVs1ml+2UWMllcEOWwe2ai0NiP7e70Y5Am8r9nxe+cs
Ihg55aKjCZQVY/liWrFTfyoEJA5xH02zDB+qpj3A17aSH0Hw9VjPkDh33U3JOlQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:44 2025 by rpki-client