Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
File:                     5muokllQFHlLtkUdFCgchAAgYgM.cer (raw, json)
Hash identifier:          +Q/tSo6k0Vg/lgcfwHLe8fgZ1XYC1goC5AbRFanlkkc=
Subject key identifier:   E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C566
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Jul 2026 13:07:16 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 103.116.188.0/23
                          IP: 2001:df5:5d00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181606 (0x2c566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 16 13:07:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:cf:eb:4c:68:85:a6:1b:f5:4b:e8:19:fb:
                    73:0a:f3:4e:9a:d4:79:40:ee:e0:c3:39:e8:6b:fc:
                    95:3d:43:23:73:29:90:c2:85:ee:ec:f8:39:c6:bf:
                    ba:e3:e9:df:b7:a0:ca:97:e1:ee:a1:30:a8:56:5b:
                    e8:7a:c2:8a:3f:e4:e7:b5:45:74:74:41:2c:8a:5d:
                    4c:cb:8f:e4:56:3e:5a:8e:1c:5e:e9:36:b3:a2:cc:
                    49:12:bf:ba:a6:74:6b:4f:ec:5c:43:89:1b:b5:69:
                    92:dc:7d:61:ab:03:d8:76:a0:1f:a0:c7:e0:09:60:
                    3d:0f:d2:c5:5e:c0:0b:51:13:7d:82:c6:99:94:39:
                    e6:f4:63:83:98:88:12:1d:52:69:3e:26:be:9d:a8:
                    f8:d1:78:a6:7e:ee:1b:2a:f2:5e:0c:65:9d:ff:e1:
                    a0:c2:56:c3:44:be:40:88:12:63:b6:7c:bf:a1:3e:
                    ca:2a:90:37:e7:03:b7:a5:c0:55:4f:d7:0a:8c:4f:
                    d5:3a:35:05:31:3d:2b:ae:8c:fa:a4:3a:4e:d2:27:
                    b6:47:67:b5:d3:c0:4d:7e:19:e1:58:6b:53:c0:7c:
                    40:bf:82:0d:e4:f9:eb:1e:34:42:19:50:c5:b3:84:
                    be:2b:19:48:90:f7:2f:1b:a9:95:f6:3a:32:e3:b3:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.188.0/23
                IPv6:
                  2001:df5:5d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:ab:1e:70:7b:8d:63:c8:a3:fa:67:7d:e8:32:4a:cc:72:
         1d:31:00:39:cf:6a:d1:2a:be:bf:9b:62:3b:b7:97:f3:62:bf:
         a7:84:29:c3:6d:24:55:8b:c5:41:e9:d1:db:6b:07:98:d5:2b:
         9f:64:be:af:51:f0:ea:3d:ac:95:12:d8:07:5f:26:91:8f:e9:
         a3:e8:f9:7a:4a:c8:4d:cf:d1:21:c7:29:7a:b9:1d:83:8e:13:
         f7:d0:0a:18:08:b6:b5:fc:cf:e5:d3:be:27:ce:1f:35:8f:4d:
         c6:9c:a4:a5:e9:5f:1a:e0:d0:f0:78:1f:99:97:92:d5:0c:bd:
         f7:77:74:e3:a9:f9:f5:8c:01:45:04:d1:2f:25:d3:81:f9:d7:
         2d:6c:c4:b4:fc:a2:4e:6c:44:18:58:31:29:59:68:a4:d9:51:
         a7:04:cd:c4:0a:a9:52:3b:14:49:cd:15:c4:f9:21:82:d1:27:
         c8:f9:01:0c:ac:e3:23:fe:d8:a6:56:f3:53:aa:d5:82:13:39:
         a7:e9:79:37:79:7c:48:e8:e1:6d:54:c7:eb:bf:1f:8a:68:90:
         72:c7:b5:7b:cf:6b:55:77:bf:34:1b:c6:d9:0d:8e:66:64:60:
         f2:02:00:62:cb:db:19:f3:8f:f2:2e:2d:83:1b:4c:7b:bc:c9:
         1c:8c:ac:b6
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAsVmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNjEzMDcxNloXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUx
RDE0MjgxQzg0MDAyMDYyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtwc/rTGiFphv1S+gZ+3MK806a1HlA7uDDOehr/JU9QyNzKZDChe7s+DnGv7rj
6d+3oMqX4e6hMKhWW+h6woo/5Oe1RXR0QSyKXUzLj+RWPlqOHF7pNrOizEkSv7qm
dGtP7FxDiRu1aZLcfWGrA9h2oB+gx+AJYD0P0sVewAtRE32CxpmUOeb0Y4OYiBId
Umk+Jr6dqPjReKZ+7hsq8l4MZZ3/4aDCVsNEvkCIEmO2fL+hPsoqkDfnA7elwFVP
1wqMT9U6NQUxPSuujPqkOk7SJ7ZHZ7XTwE1+GeFYa1PAfEC/gg3k+eseNEIZUMWz
hL4rGUiQ9y8bqZX2OjLjswA7AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU5muokllQ
FHlLtkUdFCgchAAgYgMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQwQkE0LzQ3RTkyNjg2NjhFRDExRTg5MEUzOTU0OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xs
UUZIbEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFndLwwDwQCAAIwCQMHACABDfVdADANBgkqhkiG9w0BAQsFAAOC
AQEAp0urHnB7jWPIo/pnfegySsxyHTEAOc9q0Sq+v5tiO7eX82K/p4Qpw20kVYvF
QenR22sHmNUrn2S+r1Hw6j2slRLYB18mkY/po+j5ekrITc/RIccperkdg44T99AK
GAi2tfzP5dO+J84fNY9NxpykpelfGuDQ8HgfmZeS1Qy993d046n59YwBRQTRLyXT
gfnXLWzEtPyiTmxEGFgxKVlopNlRpwTNxAqpUjsUSc0VxPkhgtEnyPkBDKzjI/7Y
plbzU6rVghM5p+l5N3l8SOjhbVTH678fimiQcse1e89rVXe/NBvG2Q2OZmRg8gIA
YsvbGfOP8i4tgxtMe7zJHIystg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:25 2026 by rpki-client