Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
File:                     9LfQRDuM_5tAmLuM7L7Yf86putI.cer (raw, json)
Hash identifier:          uCflyVkSt3WchY6GGl4STDuV//0jQsWgCFBArwpOo0E=
Subject key identifier:   F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       026C44
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 13 Oct 2025 10:50:21 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 147060
                          IP: 103.173.224.0/23
                          IP: 2001:df7:aa80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 18:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158788 (0x26c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 13 10:50:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:99:17:49:37:e6:8d:af:9f:78:9c:ee:ac:
                    2e:a5:45:57:88:49:0f:1c:70:ea:0a:87:3d:04:7b:
                    0f:d4:e2:d1:42:8f:75:28:a0:bb:25:1a:9d:0d:f1:
                    9c:29:64:74:41:8c:88:05:cf:7b:90:0e:51:99:46:
                    2a:81:11:05:13:00:81:94:ba:82:03:cd:dc:4a:04:
                    60:6d:fd:bb:29:6e:95:7a:4b:c3:e7:95:35:70:40:
                    a7:85:97:68:c8:79:43:0a:5c:3b:7b:4a:d7:6f:eb:
                    fd:09:3d:4e:bb:41:8a:05:7f:5d:14:84:b4:34:f0:
                    01:2d:f1:6d:d6:3b:4c:74:90:ab:9c:1e:3d:8d:4e:
                    78:61:6d:5b:52:00:81:fb:a8:e5:7c:05:ae:fb:e6:
                    8f:fc:11:03:c6:27:e8:cc:86:c0:34:f8:e1:a4:4c:
                    a0:de:78:66:c5:62:88:f7:c8:56:ce:ae:c4:80:88:
                    be:5f:24:f8:a0:97:ea:65:88:9a:ff:eb:61:61:3f:
                    00:a3:70:71:fa:eb:03:d1:6d:24:8c:d9:c1:f2:c4:
                    ab:f1:d3:2a:75:9e:fc:f8:c4:88:db:81:8d:96:ed:
                    a7:41:3d:f9:5a:af:63:53:6e:5d:92:05:be:74:86:
                    b2:4a:a9:d3:2c:0a:dd:8d:e8:24:1f:9d:4f:89:9b:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147060

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.224.0/23
                IPv6:
                  2001:df7:aa80::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:6b:74:63:05:bc:43:96:32:0f:08:1b:2c:e9:a8:e0:96:
         ee:52:17:9d:36:82:59:4d:12:9f:27:c6:aa:6b:ce:28:d4:df:
         1e:66:fe:3b:8c:d9:a4:e6:23:e8:d6:2f:63:4c:89:3d:43:e3:
         f7:a5:04:d9:71:8b:b0:39:00:22:61:59:99:c2:9d:1f:54:de:
         2e:c5:a5:6c:f1:d3:7a:3d:ae:8d:49:80:1c:ed:73:46:ed:3b:
         5b:77:16:f7:0e:de:7d:77:5f:7f:f7:da:7f:17:29:68:bd:bd:
         2e:45:9e:e0:80:71:59:e6:7d:68:44:19:10:76:bd:65:57:7a:
         f2:97:80:15:81:c6:04:32:61:3b:9a:61:59:a1:29:04:ce:41:
         6d:95:ed:79:30:3e:57:f0:66:fa:de:73:d6:dc:55:a2:e7:1c:
         5e:96:48:04:96:5d:38:15:96:61:b3:d4:52:47:7f:76:a4:23:
         2b:1e:06:34:9a:84:04:ca:a3:e0:bb:f3:22:29:2d:1e:bf:92:
         2a:53:80:58:c4:92:cb:1d:07:84:7a:76:65:5f:4d:4b:1a:34:
         76:14:bc:28:67:92:15:ea:d4:64:03:81:37:c0:cf:98:30:16:
         d3:aa:09:0b:8e:e1:e8:00:16:fd:00:f8:d6:7c:66:38:b1:a1:
         76:e2:22:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:32 2025 by rpki-client