Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
File:                     2lA_lyy8k6jIHflfVKLLKjjxPHc.cer (raw, json)
Hash identifier:          7dFGut1hioisE25AvFFQUp4mPL0dtrqdOTifGmr9XRo=
Subject key identifier:   DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BEEB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 22 Jun 2026 19:35:37 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 140588
                          IP: 103.150.156.0/23
                          IP: 2001:df3:7b80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179947 (0x2beeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 22 19:35:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:e0:2f:1e:c0:2d:c7:5a:df:ca:3d:32:2b:
                    9d:da:41:04:a5:d6:02:15:6d:07:70:77:a3:2c:95:
                    96:17:12:95:72:65:dc:e1:1a:f5:c3:39:b4:a0:c9:
                    b6:3a:81:13:d3:6b:54:31:4b:9a:72:56:51:79:70:
                    bf:f8:1d:14:79:08:93:a0:b5:ff:3d:ed:2c:47:2c:
                    2b:7f:27:3b:83:37:53:53:e4:3a:db:ec:cd:39:f1:
                    c3:fb:f8:e7:ee:da:ae:87:03:1b:94:a7:f1:a2:5f:
                    b8:59:cc:7b:66:76:2d:63:52:dd:8f:73:7b:07:49:
                    a4:62:c2:88:af:63:f2:df:33:49:74:df:26:49:e0:
                    62:6f:84:3a:80:02:16:4a:0e:b1:46:23:70:fb:07:
                    9e:01:86:ee:71:69:d0:7f:7d:ab:ac:ce:3b:c7:0f:
                    7f:9b:43:6c:b7:c6:01:d8:ca:20:b9:a5:37:05:f0:
                    53:47:d9:b4:cc:68:d9:0b:0a:e1:c6:8c:5a:e1:80:
                    e6:8a:e3:6f:4a:e0:19:18:ff:00:a9:8a:79:e9:f0:
                    db:96:67:b5:6b:f3:05:cd:66:17:ef:e7:a5:bd:2f:
                    59:e1:a5:02:97:9a:74:87:fc:a9:bb:a7:f5:ab:94:
                    3c:5e:a5:ee:d0:17:3f:0f:76:ab:50:a6:8e:f2:85:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140588

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.156.0/23
                IPv6:
                  2001:df3:7b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:f1:c1:4d:11:c3:42:fe:40:57:18:73:4e:a8:3f:8d:dc:fc:
         d9:56:8b:11:41:b1:ea:0c:96:ad:0d:d7:4f:13:8f:3d:aa:04:
         8b:aa:43:7a:f9:97:8a:f0:b6:49:fb:7b:a3:a0:97:0f:10:a2:
         65:74:62:ed:f2:63:c7:5a:27:77:ba:50:3e:25:18:fb:bd:58:
         36:a6:81:41:f5:c2:d1:d9:e9:c1:2e:f8:5f:7c:fa:f6:e9:19:
         18:e0:d4:6e:a5:c8:28:86:78:5b:62:1c:31:22:c6:a1:7e:63:
         b9:40:91:b7:49:8c:45:35:f0:b6:58:52:07:04:f1:1c:b8:e7:
         d9:f0:15:29:74:c8:1b:76:e9:d8:92:fa:55:1d:84:21:cb:b7:
         b8:15:25:5e:97:a1:57:fe:fa:b3:e0:13:cd:eb:30:bc:ad:44:
         5b:cd:08:e7:1a:0c:c7:4a:50:97:91:8f:6d:ec:00:9e:02:f2:
         de:45:87:28:42:98:e9:57:d1:10:09:67:f2:ae:0d:79:00:a5:
         74:8e:5c:53:41:0c:0a:42:c9:3d:a3:e3:5c:57:89:fb:ab:dc:
         84:49:70:47:73:3d:4c:3d:91:ad:fd:e7:d5:2d:d8:ab:42:f8:
         08:11:47:62:26:fe:7a:38:a1:86:f9:72:b6:da:93:46:05:57:
         9a:1e:90:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:33 2026 by rpki-client