Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.cer (raw, json)
Hash identifier:          dm36RMgNYOOfKeceuvmWos/1pAmhgcrdvXbUVJpTR9w=
Subject key identifier:   42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D05E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Aug 2026 12:26:12 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    AS: 23932
                          AS: 45223
                          IP: 180.128.0.0/16
                          IP: 202.44.52.0/22
                          IP: 202.52.4.0/22
                          IP: 203.145.112.0/21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184414 (0x2d05e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 27 12:26:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ca:d5:d7:d7:fc:74:39:8b:9e:a2:0c:e1:32:
                    02:16:7c:0c:3d:88:62:0e:7f:5a:40:44:47:08:3f:
                    7c:58:22:0c:04:5e:34:25:0f:73:77:2a:fe:f9:86:
                    89:25:d0:22:ad:fa:13:40:a3:03:47:c3:72:e9:b2:
                    19:ff:73:cd:32:bc:eb:dd:c1:1c:29:9d:eb:b0:bc:
                    47:bc:aa:cc:54:21:dc:0d:68:8a:64:35:72:7a:8a:
                    d2:d0:2f:e0:c4:87:d2:5a:e6:a2:cc:45:e4:87:bb:
                    3f:c3:19:ba:f1:33:05:e9:5e:70:1f:78:60:a5:f4:
                    62:a9:e3:b3:7c:28:fb:28:7f:47:3d:79:3d:20:91:
                    b1:ca:fa:38:0b:4a:7b:b2:aa:b6:dd:f0:ff:16:d7:
                    7a:99:8d:3c:db:ef:25:54:be:9e:1b:be:50:98:b8:
                    66:a1:76:29:a6:fd:91:f0:e5:3d:ad:4d:af:e2:01:
                    21:8d:fd:1a:cb:f3:d7:06:f6:1f:cf:0b:d5:2f:e2:
                    fd:46:e7:a0:5c:5c:42:23:66:58:46:d9:55:f7:d2:
                    4c:8d:10:39:b6:d6:eb:25:e5:60:25:42:81:79:72:
                    55:8c:8d:01:97:4e:21:97:1b:44:c5:e6:09:43:32:
                    8b:5d:00:82:b6:57:cb:54:af:0f:7d:57:ec:d8:fa:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23932
                  45223

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.128.0.0/16
                  202.44.52.0/22
                  202.52.4.0/22
                  203.145.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:90:cd:66:fe:fe:45:b5:26:64:12:d2:52:8e:bc:72:a9:
         64:3a:c5:c9:5b:8a:4c:2f:ba:42:2c:24:89:70:75:eb:16:fe:
         f1:0a:cb:20:e2:29:6f:e5:3b:3a:2c:98:dc:29:08:dc:01:65:
         1b:dd:1b:31:f0:cf:ab:56:5a:24:3d:4f:71:ce:b3:df:f4:7c:
         32:c8:4c:8b:d6:6c:db:4f:bf:0c:a5:d4:86:a0:c8:ac:bf:09:
         03:e1:95:49:ad:c8:c6:7f:a2:8b:cd:9d:44:34:96:3d:b5:16:
         94:fc:80:00:27:96:4e:72:2a:a0:b4:cc:68:b6:44:0e:03:5a:
         86:02:eb:cc:54:eb:62:e4:b4:cb:0b:3d:09:6e:2f:e0:83:e6:
         2d:a6:70:65:26:f0:64:21:f0:a2:ae:f6:44:ad:b4:b9:e8:18:
         7d:71:c7:2b:03:bd:e0:71:a8:f6:94:d5:b1:66:fe:01:dd:35:
         73:f5:84:33:51:9c:52:45:fc:87:be:8e:88:7c:4d:37:f2:f3:
         3c:7c:fe:97:99:55:ab:57:b2:5d:3f:3b:85:10:d3:9f:2e:0c:
         b8:58:65:a7:1e:a3:38:45:d3:45:d1:b7:f2:20:57:fb:0d:c0:
         87:90:28:20:e3:7a:28:82:88:f1:1f:84:ae:c9:ba:ef:6d:9c:
         54:19:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:08:22 2026 by rpki-client