Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
File:                     84ggnKyyxrgUysV4XUv002zElx8.cer (raw, json)
Hash identifier:          Up9biat2XAJV4DyeBxA9KLA7ZaPSQy8By7vrZgMUqkU=
Subject key identifier:   F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B204
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 12:51:20 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 133451
                          IP: 103.132.232.0/24
                          IP: 103.212.192.0/23
                          IP: 103.229.248.0/24
                          IP: 2001:df1:200::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176644 (0x2b204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  4 12:51:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f7:85:b1:b6:8b:66:44:94:5a:d5:6e:4a:
                    30:8a:14:fc:e9:d2:54:fa:2c:fa:75:4a:36:f4:d9:
                    38:b0:8e:cd:25:57:ba:61:34:70:36:5e:56:1a:c0:
                    b9:a6:6c:2a:83:f4:62:26:5e:b3:76:6b:fc:a2:f9:
                    2c:3f:50:56:79:56:ed:2c:b0:3f:83:68:57:c3:ba:
                    ab:0b:b1:c4:e0:b8:6d:16:33:f9:15:54:91:c9:cc:
                    0b:03:bd:92:da:83:e9:70:06:70:ed:d7:4e:e6:d5:
                    a7:89:44:e9:d5:3a:b2:c7:27:b1:3a:09:41:2c:5a:
                    18:9c:38:bc:ec:81:26:d2:52:19:7f:1b:04:55:c1:
                    98:9a:95:0e:a1:58:ab:92:9c:59:c6:fe:fd:e4:07:
                    80:c4:21:02:04:01:e6:29:22:1b:96:65:6b:5f:06:
                    db:12:72:4f:40:3a:36:59:b3:48:45:cf:05:ed:d3:
                    37:47:88:a4:21:5f:a4:80:d2:72:66:a1:c8:58:71:
                    cd:01:b4:fb:19:30:f3:71:b6:b8:a6:d4:1b:9a:ba:
                    25:d6:50:aa:97:ef:32:15:6a:69:ce:e3:73:58:88:
                    83:be:e7:42:87:28:2b:1c:f8:d2:92:d0:85:63:16:
                    88:55:71:22:9c:76:35:09:af:88:4e:e1:c9:35:49:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133451

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.232.0/24
                  103.212.192.0/23
                  103.229.248.0/24
                IPv6:
                  2001:df1:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:3a:5e:f4:89:4c:22:a2:c2:f9:ca:f6:5a:2e:17:fb:d4:10:
         7e:c1:ed:dc:7d:cb:32:0a:9d:37:6c:96:80:10:dc:f7:37:8d:
         b6:72:50:71:eb:e4:a9:3b:5f:f9:f7:8e:ff:39:90:92:35:85:
         44:75:2d:67:af:f7:04:08:1e:49:5a:a0:2b:be:86:44:42:22:
         0e:b7:3b:72:9f:ad:a9:d4:8a:4b:6b:fc:b3:93:a8:85:c1:a2:
         43:28:6e:53:6a:db:6f:34:81:59:9f:be:e5:c2:4f:3c:5c:ce:
         e0:1f:cc:2d:a6:7e:57:2d:91:d0:07:80:cd:ec:ba:ac:fe:5f:
         ab:55:77:4c:24:2f:2a:03:69:78:96:c4:3c:07:54:d8:35:66:
         ec:5f:cb:8f:29:f7:7d:ab:f4:98:bd:56:f4:84:f2:7d:d4:f6:
         1e:a5:4c:e6:39:a3:7c:c9:11:c8:f5:f3:c7:de:a8:58:04:82:
         c3:30:d5:e2:c6:44:55:26:49:10:39:8a:3c:96:79:3f:72:1b:
         1d:08:61:94:58:6c:cf:44:b7:53:a8:30:36:2e:fd:69:cf:9b:
         7a:4c:08:07:51:a2:18:d6:51:3b:e3:05:0b:d8:a4:48:6e:9c:
         0f:d9:11:32:13:3f:78:d9:94:1e:07:f2:7c:8d:3d:42:07:e2:
         ca:ad:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:55 2026 by rpki-client