Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
File:                     Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer (raw, json)
Hash identifier:          l5PoMM8va0OM6rxzbo+i2Q3oJFa+YpakBhI8uM8s7H8=
Subject key identifier:   36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C5A0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 17 Jul 2026 08:04:47 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 18402
                          IP: 203.78.8.0/21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181664 (0x2c5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 17 08:04:47 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:af:45:fb:f5:8e:ad:5c:4e:03:6a:f6:79:
                    4e:0d:e6:2e:1a:63:b4:fa:32:57:7c:4a:28:a0:c0:
                    28:14:8e:c3:5e:ab:62:4a:f4:4b:f2:88:21:38:7f:
                    5e:06:49:55:79:90:a1:05:5f:92:c0:a2:4a:36:db:
                    2e:4b:52:a5:00:1c:0b:44:f7:c6:ad:f4:8e:85:2c:
                    15:ab:9d:0b:db:0a:7d:7d:5f:9b:d5:78:b8:64:ac:
                    d5:f2:ef:e5:68:e0:e1:8c:de:4f:a9:9d:b0:31:f1:
                    3d:41:42:12:81:6f:1d:dd:22:b1:67:18:62:75:1c:
                    16:58:af:0c:e6:c8:77:9b:1a:5a:c0:86:36:e7:e0:
                    3b:d0:27:28:67:53:5c:1d:a0:79:68:73:78:c2:90:
                    4d:84:88:f0:0e:6a:c4:c3:38:65:48:c0:fe:c6:5a:
                    7d:2d:db:2e:90:29:01:35:03:26:ef:da:f0:6b:de:
                    fd:77:d3:7d:7e:67:9d:99:3b:e6:9b:c2:c3:22:3b:
                    ee:ef:a0:17:ca:af:5d:53:af:80:91:d5:88:77:44:
                    bd:7c:98:07:2f:c0:53:4d:0c:5d:02:4e:4c:3c:b4:
                    40:ac:8b:58:46:e9:c3:cc:ad:0c:bb:1a:25:88:01:
                    c5:05:07:e4:b6:91:e9:e2:d9:43:22:1b:17:26:3f:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18402

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:e7:03:6e:d0:41:21:76:d0:ef:6e:e9:d4:d7:42:b7:4f:f0:
         2a:ac:b5:ac:b4:9f:46:9a:12:9e:45:a3:9c:29:3d:de:d9:11:
         89:a9:a0:8d:d1:19:ad:3b:eb:25:50:62:a3:6b:f5:d3:78:a0:
         50:a7:98:86:e8:fc:d3:e6:94:84:b3:8f:2c:4a:b5:c8:0a:86:
         b7:3f:d7:e5:99:8b:e6:cc:cd:53:af:d5:4a:2d:a8:76:cc:82:
         45:60:71:36:09:a9:81:14:51:e0:91:06:9b:30:98:35:10:3d:
         b1:c4:43:b6:1a:6b:6a:ca:69:a5:bd:a6:9d:15:c9:24:5c:c0:
         61:b8:56:2d:ea:50:47:40:68:43:44:73:d2:96:27:9f:48:aa:
         d9:c4:41:76:f4:9e:8b:74:2d:6e:a8:16:93:cb:a4:89:2d:3d:
         5b:fc:2a:36:e4:f4:ba:7b:79:b2:8c:97:92:00:00:fd:2c:7a:
         97:48:64:01:65:f3:b1:08:ab:7b:b5:be:8d:ac:99:f0:b2:c4:
         98:33:0c:23:87:00:24:1e:12:4c:fd:71:f5:eb:32:11:fe:ea:
         5d:a5:e2:58:fa:c1:5f:0a:3b:9e:d2:21:59:be:6f:d3:9e:a4:
         7e:ab:bf:7c:f7:04:68:15:14:49:b2:84:14:9f:25:0b:a2:81:
         6b:66:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:41 2026 by rpki-client