Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer (raw, json)
Hash identifier:          W9HyiTqmASezRUKwImuV8YBOq7wZNRra/GGX8RT+n7U=
Subject key identifier:   0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C537
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 14:03:21 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 103.115.16.0/22
                          IP: 2403:9ac0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181559 (0x2c537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:03:21 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:3a:bb:92:4d:2e:d3:5a:25:87:44:39:b2:
                    54:13:e0:f6:a9:38:d7:0c:16:c3:bb:f8:1f:4c:60:
                    98:f7:64:68:73:5b:f6:d8:7b:80:d6:63:68:e6:c7:
                    68:eb:c6:9e:e8:75:56:5e:93:89:48:c2:0c:c0:a8:
                    f0:4c:7a:3c:84:b8:7c:1d:56:5b:61:9b:b2:eb:1d:
                    81:c8:de:bf:b6:e5:71:a4:31:0d:70:e2:a8:6c:a4:
                    df:38:f9:04:32:0e:d7:f6:35:00:c3:95:83:e4:93:
                    da:26:cb:25:c4:78:e6:41:27:1e:cd:fd:b7:e1:8d:
                    84:29:90:fa:12:cd:9e:69:7f:a9:52:91:a7:41:bf:
                    05:43:e0:21:6a:6e:f0:85:fb:f0:ba:f9:5d:c7:b6:
                    2a:14:57:cc:3a:aa:ad:e1:03:0d:ef:1b:8f:0a:ef:
                    3e:86:60:57:73:e6:d9:fd:4f:cf:ff:6b:05:15:94:
                    53:7b:c3:78:6b:c3:84:56:24:b3:d5:f9:c5:f7:9c:
                    ec:2c:5d:be:01:16:b0:d8:68:71:d2:9a:d4:73:56:
                    25:ea:4f:45:db:b6:96:45:bb:0e:f6:85:6d:4d:1c:
                    f6:78:0b:d2:4d:0a:e5:a0:1d:67:85:90:1c:12:6b:
                    3d:bf:4c:96:1e:b2:2b:3b:6f:c4:ec:1f:19:be:a9:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.16.0/22
                IPv6:
                  2403:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:c4:61:b7:db:99:c5:5f:d5:d9:a9:11:0a:d6:d3:ea:08:68:
         13:5c:96:fc:52:07:83:a8:d7:a5:ce:37:2c:03:6a:83:ba:ca:
         6c:64:61:98:1f:99:5a:57:91:20:6d:6b:0b:40:87:dc:7d:3c:
         51:fa:d2:02:ce:be:06:80:19:6a:a6:50:90:6b:df:3b:5a:58:
         41:01:b7:c8:a0:7e:4e:cb:dd:10:b7:3b:9b:73:7f:8a:3a:89:
         0f:ed:1e:00:3e:7a:99:6b:0b:66:1a:4d:1d:7d:44:04:08:01:
         94:30:a4:76:a4:40:f4:24:b1:1b:c2:e6:1d:d0:5a:69:7b:fc:
         a3:9d:1d:d5:47:c7:cf:e3:a0:1a:d4:1c:14:17:de:5f:24:6c:
         37:1e:25:f1:fe:62:01:c6:b8:61:63:3e:0f:a1:c1:f5:ba:49:
         44:88:c1:dd:9f:17:29:3a:ce:17:ea:dc:ad:10:4e:4c:31:a1:
         96:45:28:df:fb:1e:da:1f:43:73:01:63:02:7d:9f:51:21:f3:
         29:7a:8b:d8:b6:ab:cd:34:d0:a6:1c:b9:af:53:49:e9:29:99:
         9c:17:4e:fd:7b:bd:cd:08:36:c3:8a:63:76:d8:2e:7d:72:f1:
         e4:30:81:20:7d:f6:f9:c0:bd:c2:6d:b7:1c:0d:63:ba:f2:2d:
         96:31:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:07 2026 by rpki-client