Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.cer (raw, json)
Hash identifier:          qyN0tPDqE5gs64hsTSzEbvTjFvPDdXb0duz4o/On1Ng=
Subject key identifier:   EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B20A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 12:57:59 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 136506
                          AS: 137072
                          IP: 103.52.236.0/22
                          IP: 103.59.136.0/22
                          IP: 103.95.28.0/22
                          IP: 103.215.172.0/22
                          IP: 157.119.52.0/22
                          IP: 2401:d440::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 14:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176650 (0x2b20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  4 12:57:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:44:33:ee:5a:c0:70:97:a9:db:cb:df:6d:
                    73:9e:b8:1d:77:6c:73:d5:5b:a0:75:f4:27:35:e4:
                    d9:d3:8e:31:61:b9:31:9b:f4:fa:bd:5e:68:fe:4e:
                    16:08:f0:70:52:ef:5a:fc:97:2d:46:df:44:81:60:
                    91:73:c0:6e:a1:50:11:c0:21:bf:ce:04:3a:45:5d:
                    9b:97:25:f4:71:15:59:9b:23:54:2e:3b:33:bf:4d:
                    98:dd:ea:f8:7d:a9:4e:54:69:b4:b1:94:9f:ec:1b:
                    6e:ff:94:11:79:df:83:56:eb:23:8d:10:0f:54:44:
                    48:06:df:85:9f:37:2f:54:33:db:bd:e1:bd:a7:5c:
                    35:d2:52:5f:c4:65:f6:d9:59:e0:83:42:86:7f:de:
                    26:f9:31:30:62:f5:ad:91:b6:c6:0d:ce:9e:51:ec:
                    b5:2d:c2:fc:55:33:8f:e0:40:7e:16:5b:de:a5:e3:
                    dd:1d:22:cd:57:56:61:a6:75:cf:3c:c5:71:62:5b:
                    7a:5b:02:7c:ed:72:dd:6f:91:a9:ae:62:9f:be:34:
                    44:43:48:3d:21:a2:bc:bd:ae:13:68:46:7d:eb:9e:
                    cf:9a:70:12:9b:aa:fb:7d:9d:ee:b6:c9:9a:66:00:
                    8c:44:8d:13:a3:f0:18:8c:81:c4:05:8a:a7:d8:bf:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136506
                  137072

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.236.0/22
                  103.59.136.0/22
                  103.95.28.0/22
                  103.215.172.0/22
                  157.119.52.0/22
                IPv6:
                  2401:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:c4:52:66:7e:7c:68:98:c1:84:ed:e1:f7:3b:2a:0a:b7:
         d9:4a:fb:49:7d:3c:ac:f3:78:d4:6c:fb:22:35:0f:69:fa:ea:
         fa:b0:ce:d5:21:b2:58:fe:26:ad:e5:f3:31:38:87:b5:8b:77:
         0a:46:75:6c:cf:0b:4c:db:a9:33:cc:34:68:72:20:48:37:49:
         35:74:71:50:98:de:c6:ec:b2:de:3d:87:b5:29:7f:f4:93:4d:
         48:e5:73:c8:be:78:1c:54:d5:e3:d6:c9:41:93:06:fb:65:8d:
         54:e5:4d:eb:79:f2:05:92:b1:50:7f:64:d0:9e:53:28:64:45:
         d0:9f:4a:31:07:4e:5b:03:71:08:fb:16:4d:c4:25:4c:96:e2:
         08:8c:d3:9b:12:41:48:ee:9a:07:3f:ba:82:e3:10:a1:22:a5:
         cb:75:d3:15:b8:15:37:44:30:51:2c:74:2f:9f:6c:36:a7:80:
         52:28:d6:1b:12:99:f5:e5:db:5d:b7:ff:15:a9:37:c7:9f:b2:
         4e:9b:23:76:06:28:b4:0f:c9:c6:17:f0:6f:34:6f:b6:c6:64:
         4f:bf:d5:21:8e:f1:4a:77:da:d0:6a:47:e1:86:34:7d:46:43:
         26:64:f6:b2:c0:75:08:62:62:38:01:d7:49:cd:9a:0a:24:c7:
         1a:e3:65:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIDArIKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNDEyNTc1OVoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0
NDc2RTM1OTU0NTJGRjQ0MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLhUQz7lrAcJep28vfbXOeuB13bHPVW6B19Cc15NnTjjFhuTGb9Pq9Xmj+ThYI
8HBS71r8ly1G30SBYJFzwG6hUBHAIb/OBDpFXZuXJfRxFVmbI1QuOzO/TZjd6vh9
qU5UabSxlJ/sG27/lBF534NW6yONEA9UREgG34WfNy9UM9u94b2nXDXSUl/EZfbZ
WeCDQoZ/3ib5MTBi9a2RtsYNzp5R7LUtwvxVM4/gQH4WW96l490dIs1XVmGmdc88
xXFiW3pbAnztct1vkamuYp++NERDSD0hory9rhNoRn3rns+acBKbqvt9ne62yZpm
AIxEjROj8BiMgcQFiqfYv5TpAgMBAAGjggM7MIIDNzAdBgNVHQ4EFgQU788TGtZI
DR3QTx1EduNZVFL/RBwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQwRDIwL0Q5NDNBNDVBREJEQTExRUFBMkNDMkI0MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3Ra
SURSM1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhU6AgMCF3AwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAJnNOwD
BAJnO4gDBAJnXxwDBAJn16wDBAKddzQwDQQCAAIwBwMFACQB1EAwDQYJKoZIhvcN
AQELBQADggEBAKWMxFJmfnxomMGE7eH3OyoKt9lK+0l9PKzzeNRs+yI1D2n66vqw
ztUhslj+Jq3l8zE4h7WLdwpGdWzPC0zbqTPMNGhyIEg3STV0cVCY3sbsst49h7Up
f/STTUjlc8i+eBxU1ePWyUGTBvtljVTlTet58gWSsVB/ZNCeUyhkRdCfSjEHTlsD
cQj7Fk3EJUyW4giM05sSQUjumgc/uoLjEKEipct10xW4FTdEMFEsdC+fbDangFIo
1hsSmfXl2123/xWpN8efsk6bI3YGKLQPycYX8G80b7bGZE+/1SGO8Up32tBqR+GG
NH1GQyZk9rLAdQhiYjgB10nNmgokxxrjZXw=
-----END CERTIFICATE-----
Generated at Wed May 13 18:27:53 2026 by rpki-client