Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
File:                     AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer (raw, json)
Hash identifier:          CURnA8t6mh7uR19myDvPwE5PN6eCUdREG6I29Eqzsvs=
Subject key identifier:   02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D01B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Aug 2026 13:28:48 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 131684
                          IP: 103.69.172.0/22
                          IP: 2405:f780::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 18:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184347 (0x2d01b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 26 13:28:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:38:98:c6:fc:bb:4f:ac:2b:a5:42:dd:2d:
                    70:39:00:b0:6a:9e:fb:ff:f9:e1:ec:6a:2d:78:7a:
                    6a:fa:86:28:f5:14:bb:40:c4:56:79:ee:3c:58:07:
                    3f:1d:7e:24:15:3b:4e:75:e5:79:85:4a:35:f6:0c:
                    f1:1f:4e:0a:55:ea:07:3e:0d:78:e1:f2:c6:90:3d:
                    5e:fa:f3:b3:8c:d9:57:50:4a:78:83:d9:78:35:c5:
                    6e:b0:30:3e:78:9e:0c:dc:2f:a4:f5:65:08:21:8e:
                    11:18:1a:24:07:03:7d:34:cf:9b:40:68:0b:ce:db:
                    a3:42:41:79:2a:a3:6a:31:e6:d0:38:6c:52:78:f3:
                    eb:dc:50:ce:01:5e:dc:0c:bf:3a:6a:19:4d:44:cd:
                    15:4b:0e:8e:8e:2f:44:67:28:1a:62:4a:a1:e0:00:
                    c0:10:8b:4d:a6:fd:16:d3:fa:b8:36:60:ec:15:06:
                    ed:3e:61:c2:e4:18:92:38:18:d3:d9:d8:aa:53:17:
                    64:cb:48:2b:53:a7:dd:d1:bc:93:82:4e:a9:6a:8d:
                    ab:4c:1b:b3:32:7c:5f:d8:c1:6c:4e:f0:83:7c:19:
                    d5:47:89:5e:e5:5c:04:b4:d7:bb:ee:fd:c9:3a:1e:
                    62:89:6e:4a:2c:92:f6:ca:7f:84:99:7b:28:d4:08:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131684

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.172.0/22
                IPv6:
                  2405:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:50:8a:2c:76:25:07:4a:a2:40:53:b9:fc:47:28:95:16:
         80:87:05:22:0b:6e:4d:78:b4:71:6b:81:64:42:fd:df:e1:d3:
         1e:12:61:f8:18:39:04:4f:94:e7:41:df:06:59:66:a1:29:1e:
         84:e9:67:db:a5:9c:38:dd:9c:d7:87:5a:ff:a0:a7:ee:c4:9f:
         29:e2:9d:9e:f3:4e:f0:44:15:3c:0a:07:58:dc:a5:9e:f8:c2:
         0d:3c:f6:00:d7:c6:52:e3:8b:f7:99:b7:08:03:8b:53:40:50:
         87:1f:64:60:6b:bb:62:04:85:4d:d3:88:ec:ee:d7:b7:c8:2a:
         43:85:04:8b:61:74:51:d9:4b:ca:78:69:95:73:0c:9d:df:fb:
         da:ca:2b:12:c3:69:94:f5:b0:24:5b:9b:4c:4c:37:e9:af:14:
         a7:91:48:ec:10:5d:33:d1:28:cc:5c:54:30:79:12:49:d0:70:
         5a:2d:84:3e:14:d8:b2:e3:bc:e5:af:e3:77:19:f8:90:29:ac:
         e2:d3:de:8a:b9:15:ac:45:22:9e:bd:02:2e:6b:b0:ba:96:16:
         e0:25:0e:1d:43:02:d8:1d:90:cd:66:e8:64:88:b0:a1:9b:bf:
         57:ad:9c:f9:57:cc:45:6e:13:b6:01:a7:08:f0:ef:80:db:86:
         82:d8:d3:15
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAtAbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgyNjEzMjg0OFoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2
OEI5RUY4MUMzRjlFOUZCMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCj/TiYxvy7T6wrpULdLXA5ALBqnvv/+eHsai14emr6hij1FLtAxFZ57jxYBz8d
fiQVO0515XmFSjX2DPEfTgpV6gc+DXjh8saQPV7687OM2VdQSniD2Xg1xW6wMD54
ngzcL6T1ZQghjhEYGiQHA300z5tAaAvO26NCQXkqo2ox5tA4bFJ48+vcUM4BXtwM
vzpqGU1EzRVLDo6OL0RnKBpiSqHgAMAQi02m/RbT+rg2YOwVBu0+YcLkGJI4GNPZ
2KpTF2TLSCtTp93RvJOCTqlqjatMG7MyfF/YwWxO8IN8GdVHiV7lXAS017vu/ck6
HmKJbkoskvbKf4SZeyjUCJPbAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUAoEcMdUM
kf/9Xtpoue+Bw/np+xIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxODhBL0M5NjM1N0NBQUE5NDExRURCMDc3NEY0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MTg4QS9DOTYzNTdDQUFBOTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRV
TWtmXzlYdHBvdWUtQndfbnAteEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgJkMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ0WsMA0EAgAC
MAcDBQAkBfeAMA0GCSqGSIb3DQEBCwUAA4IBAQAwrlCKLHYlB0qiQFO5/EcolRaA
hwUiC25NeLRxa4FkQv3f4dMeEmH4GDkET5TnQd8GWWahKR6E6WfbpZw43ZzXh1r/
oKfuxJ8p4p2e807wRBU8CgdY3KWe+MINPPYA18ZS44v3mbcIA4tTQFCHH2Rga7ti
BIVN04js7te3yCpDhQSLYXRR2UvKeGmVcwyd3/vayisSw2mU9bAkW5tMTDfprxSn
kUjsEF0z0SjMXFQweRJJ0HBaLYQ+FNiy47zlr+N3GfiQKazi096KuRWsRSKevQIu
a7C6lhbgJQ4dQwLYHZDNZuhkiLChm79XrZz5V8xFbhO2AacI8O+A24aC2NMV
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:27:08 2026 by rpki-client