Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
File:                     DjGKapQeYMmQhh2GmyA5SMi0iEE.cer (raw, json)
Hash identifier:          t/3Tv83+dMQsC2sWffhg2otZ27Ghq0sQFNnH7RJ8dFg=
Subject key identifier:   0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C68C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Jul 2026 13:00:26 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 139276
                          IP: 103.140.158.0/23
                          IP: 2001:df0:c880::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181900 (0x2c68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 22 13:00:26 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:26:40:76:0f:23:49:ca:26:19:2f:c0:5c:
                    a2:c2:94:d2:24:30:bc:7c:29:b7:a6:8d:5e:d2:66:
                    bc:5a:6b:2b:01:63:0e:91:83:5d:2d:79:08:a5:a9:
                    dd:24:82:ef:d2:31:56:ad:f3:cd:ef:d8:e5:01:9d:
                    60:26:b4:25:91:9e:10:c4:8e:86:37:7c:07:68:eb:
                    c1:83:30:d3:65:f3:88:d5:d9:9f:37:f1:a2:45:27:
                    0a:f4:a2:3c:11:e8:52:98:62:13:e8:7b:fa:fd:1e:
                    7a:21:2f:86:a3:21:61:79:7d:a8:41:47:1b:a4:61:
                    7e:73:2a:63:42:50:dc:83:a2:3f:fc:2d:45:84:d9:
                    7f:d5:1b:26:13:33:ee:fe:c4:2b:f3:ef:59:3a:45:
                    b6:08:a0:b7:db:b2:7e:0f:f7:1d:7b:71:33:80:cd:
                    c7:0a:87:42:33:70:1e:bb:da:66:83:c8:a3:a2:09:
                    1c:3f:e5:97:d9:02:d0:a7:3e:ea:20:b1:7e:21:e6:
                    21:7a:d2:54:d7:4c:52:5c:1d:9b:1c:71:6e:e7:f4:
                    f1:c0:d8:ec:cb:d9:4a:9a:0f:e0:6e:e6:09:72:2d:
                    48:4b:0f:e0:4d:0e:e4:19:08:15:ef:f1:fa:64:4d:
                    db:22:42:d3:c8:30:ce:85:ec:36:59:63:45:67:14:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139276

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.158.0/23
                IPv6:
                  2001:df0:c880::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:14:f8:76:39:20:dc:ec:8e:90:0f:2b:19:33:8c:ea:31:f5:
         ff:6e:2c:c5:ad:b8:15:50:84:a6:78:42:15:09:14:6a:03:89:
         52:8f:5e:87:31:22:42:d9:a3:39:bf:74:a4:57:9e:bc:b9:52:
         72:22:60:a1:04:97:5f:e2:d6:78:33:c3:03:5c:28:81:93:5d:
         1a:46:46:c6:83:45:37:c1:28:d2:87:1e:71:8c:f7:23:91:f4:
         8f:a5:65:c5:a4:bf:e5:9f:db:9b:9e:f5:de:fe:13:4c:0b:dd:
         a1:49:40:f6:5c:ab:ed:56:08:ab:dc:2a:7e:99:d7:65:bb:19:
         27:97:48:3d:e1:13:12:5e:bb:12:c6:3d:42:80:c2:d3:35:a7:
         89:bc:64:f7:36:79:9a:2c:2a:2d:e1:1d:c2:df:ee:f1:a8:8e:
         ca:3a:38:9d:f4:d9:63:33:51:11:ba:3c:c4:71:70:b4:7a:25:
         7e:51:67:0d:0a:fb:c2:ec:8b:a5:f0:43:8d:db:42:19:8b:9f:
         39:8f:cb:3a:8b:a6:d4:34:12:e8:1d:4d:1f:2b:9f:73:8a:54:
         2e:58:ce:76:5a:8b:1e:75:9a:b2:17:d4:09:e9:77:02:7c:5c:
         25:74:0f:d5:b3:a1:0a:23:93:dc:e9:45:88:11:d1:30:de:47:
         9c:2d:c0:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:48 2026 by rpki-client