Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
File:                     NAQf45nAdllht5_hJGlBcocgc7s.cer (raw, json)
Hash identifier:          cAPiK2kkjHG0m7r2c2pzzBzKptcUvWFRs7KcRSh7Mng=
Subject key identifier:   34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C690
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Jul 2026 13:08:48 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 134515
                          IP: 103.236.119.0/24
                          IP: 2001:df5:8400::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181904 (0x2c690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 22 13:08:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:e2:ac:5d:17:56:71:1d:40:67:f0:e5:85:
                    33:c3:ee:47:c9:40:1a:1f:b1:d4:6e:c9:4c:07:1a:
                    d3:34:db:c4:a4:ea:40:37:d9:6d:fa:6e:5b:b1:5d:
                    41:6d:45:05:8e:b3:2b:37:bb:ae:7b:77:da:91:6e:
                    69:ab:f3:c5:22:9e:92:73:5e:8a:4d:1d:23:57:2f:
                    7e:cb:f6:e8:ad:95:b3:8d:45:ba:8f:07:2d:ab:9e:
                    c7:72:68:5f:42:36:f5:26:c3:39:6d:49:98:ef:c9:
                    f8:5e:16:d5:73:b6:d0:7c:94:14:95:86:78:90:9e:
                    fd:c5:6e:da:32:a5:21:7e:0c:c3:53:5a:85:a4:3e:
                    4d:51:cc:5d:1c:72:f9:f2:07:f1:d9:2e:51:ea:67:
                    7b:ca:48:4c:39:24:34:d7:b0:8c:3c:be:c7:84:a6:
                    94:5b:cb:6e:bd:5a:00:17:88:64:c3:fc:0e:40:99:
                    a8:d9:86:a9:70:94:68:dc:94:e8:63:9c:a7:cb:47:
                    50:c4:39:7b:4c:0d:8e:d7:4e:21:d6:ec:03:3c:9c:
                    a6:a9:75:8b:ea:24:15:71:d3:b4:43:35:d8:65:eb:
                    32:c5:76:ac:c3:bd:6a:25:1d:93:19:3d:57:ce:52:
                    8d:81:f1:01:f1:85:f6:40:92:ec:97:69:cd:dc:c8:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134515

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.119.0/24
                IPv6:
                  2001:df5:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:14:ea:d6:0f:b9:c4:ae:fc:05:63:88:34:d0:74:c8:a3:
         df:45:fe:bb:2b:b1:f3:15:8a:ca:3c:0a:8c:50:3f:cd:99:d9:
         a2:d0:ef:3d:df:53:79:da:99:58:e0:79:bd:9c:91:5d:0a:53:
         9a:e6:c3:82:93:b3:45:0a:ec:d1:7d:05:d3:ee:39:0b:fc:9f:
         9a:e2:bc:dc:e2:b5:09:72:5d:95:c2:85:8a:97:8c:1b:e0:d4:
         9d:38:e5:8b:4c:48:ad:f0:75:e5:a2:63:0b:7f:a7:0d:e2:84:
         68:12:27:f6:b6:c0:f0:91:37:a0:86:b9:60:d4:b7:d6:e4:b5:
         46:44:ed:c8:c3:f4:29:8b:06:0e:b2:38:eb:81:49:73:47:fa:
         c9:d9:7e:cb:07:08:76:fa:bc:d8:46:23:09:92:89:e9:8c:28:
         9a:03:a3:09:da:f9:e6:84:1d:e4:de:5f:fa:5f:26:12:e2:47:
         82:22:01:5c:2e:c0:8a:ab:a7:16:4f:69:04:94:96:60:6f:c8:
         a8:ae:73:25:e4:09:89:16:31:11:68:57:e4:00:bf:10:35:06:
         8a:50:d1:3c:28:e1:fa:e8:b3:49:07:f9:fd:33:9c:44:0b:de:
         ad:57:cb:57:6b:39:cc:f3:34:98:ba:32:f0:10:56:9a:51:65:
         44:7a:48:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:51 2026 by rpki-client