Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.cer (raw, json)
Hash identifier:          CV+//E24AChtIxDGUZPLSJ/HjNfDy9RRNIabkj2wGVU=
Subject key identifier:   E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BF91
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 25 Jun 2026 14:01:27 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 59363
                          IP: 103.231.176.0/22
                          IP: 116.206.56.0/22
                          IP: 2400:4cc0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180113 (0x2bf91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 25 14:01:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:bc:e2:50:b7:1a:27:8f:e2:e8:69:7a:03:
                    8d:08:61:02:76:10:7c:96:47:c2:bf:4b:a3:a4:28:
                    3c:45:dd:12:59:62:c7:90:0a:b1:fe:44:30:fd:b3:
                    15:ff:7a:a0:a9:47:cf:3e:f5:a6:8a:5f:3d:36:51:
                    ee:1e:cb:f3:bb:29:fa:78:cc:77:b2:e9:66:5d:fb:
                    ed:a2:55:df:3a:f7:20:8d:6b:c7:e1:ac:b6:37:9f:
                    3d:77:cb:70:5c:25:59:25:58:41:e6:d1:87:87:a8:
                    b1:49:38:a0:ad:7d:6a:4c:5b:2a:2f:64:82:09:df:
                    75:1e:a2:7f:84:8c:6e:29:42:25:b0:c0:f8:9a:08:
                    b1:8c:84:1b:04:ea:39:f4:15:a3:58:fb:37:79:fc:
                    09:7e:c5:44:5a:e0:0d:14:4a:65:ce:1e:32:f9:16:
                    e2:8c:6d:85:ab:3c:b6:80:eb:de:1a:38:8a:8f:1b:
                    aa:30:16:b5:d1:d4:67:df:72:9a:c0:b6:92:46:bc:
                    59:ba:88:ce:00:8d:ee:25:c8:ae:7c:85:06:f8:cd:
                    81:5c:5a:2f:a0:d4:83:6b:a7:2f:d5:02:98:4d:d9:
                    2f:a7:f8:ce:14:a1:d3:6c:c7:fe:c9:d3:20:85:e4:
                    e8:94:5d:6e:b1:6a:45:25:aa:ea:38:e6:13:6b:80:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59363

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.176.0/22
                  116.206.56.0/22
                IPv6:
                  2400:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:7d:a1:16:ce:34:dc:fe:a1:e5:4e:f0:85:fc:28:9f:e0:
         81:45:41:e1:09:2a:3d:d5:0a:d7:ea:aa:11:28:0c:ab:d8:c1:
         6e:90:2c:84:6b:02:de:02:89:63:b8:ab:2f:43:71:f7:a4:c9:
         4c:a8:cc:9c:84:ee:8a:0b:fd:6f:0d:05:e1:50:20:97:7d:1e:
         f1:dc:6f:e9:1f:94:28:0e:42:f1:7e:db:fa:d1:0e:58:3c:42:
         0f:ff:14:8a:6d:bc:18:e1:be:b4:e0:71:f8:87:54:b4:2a:a0:
         95:e5:7b:52:f1:94:0f:e9:e0:e8:6d:b2:0f:78:7f:bd:9b:61:
         ec:0a:d5:76:d1:ed:13:0e:3b:8e:91:6b:01:1f:ac:00:89:98:
         cd:7f:c3:cb:ce:c5:4b:73:6f:02:20:33:fc:fc:64:56:ba:31:
         9e:08:37:6d:28:65:d9:ff:fb:50:ed:99:f9:73:e6:7b:8d:44:
         49:12:ca:b7:28:04:ca:e1:41:00:27:9b:d5:b3:70:f8:76:77:
         89:d0:72:d3:48:9f:5a:69:1f:5d:43:15:47:d6:46:38:25:b7:
         9c:49:d8:6e:bb:68:82:67:14:98:7c:2d:3f:c1:5e:f1:f3:03:
         c5:d7:eb:8a:c4:ec:ba:72:32:53:77:09:94:c7:b9:72:06:89:
         fb:31:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:17 2026 by rpki-client