Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
File:                     Sn0mxMvxZwAkXWf79pULcSkYmTk.cer (raw, json)
Hash identifier:          YBLPSMFVesAU91pNgdXE/ank/Tcspz/AwAvJEIxFC/g=
Subject key identifier:   4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C69C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Jul 2026 14:03:54 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 151661
                          IP: 103.253.179.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181916 (0x2c69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 22 14:03:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:ae:e0:60:f3:c2:f2:f1:e4:c2:cc:21:08:
                    42:09:4f:27:d6:22:1d:be:cf:ca:66:82:c1:96:f1:
                    2d:ea:b2:28:64:1f:ee:fc:8f:88:aa:fd:e3:13:98:
                    0c:7f:e0:d7:48:b1:24:74:a2:f3:72:75:01:92:93:
                    1d:58:f3:56:79:e6:a9:dd:af:de:70:24:fb:3a:18:
                    37:dc:43:38:da:e3:92:74:47:3c:41:4b:6d:0b:06:
                    dc:ec:4d:06:17:4e:64:1f:5b:a8:f6:38:bc:b7:05:
                    b5:a8:c7:94:5f:a7:7b:08:3b:81:b7:4d:75:c9:7c:
                    a3:ee:95:28:19:68:e4:74:33:33:82:e8:40:75:52:
                    90:82:9d:c6:ba:83:d4:19:6d:97:18:eb:b7:c9:71:
                    da:39:f6:0b:6d:51:63:26:af:67:44:5d:44:a2:28:
                    3a:f2:23:c3:8c:0b:6b:22:bf:25:ee:ba:d4:6e:2b:
                    0f:00:98:f7:c2:72:cf:08:13:f2:e6:9a:9f:8f:c9:
                    eb:1b:1a:be:47:83:54:d7:29:45:d7:1e:27:34:e9:
                    c0:42:0a:68:c5:c3:e4:a2:5e:eb:e9:52:70:23:7d:
                    64:bb:df:d9:ac:3f:54:7e:1e:53:e4:ff:31:fb:3b:
                    6b:11:14:b4:0f:bf:7b:48:e6:9b:59:1d:68:19:31:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151661

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:66:e9:7e:a2:09:bd:cc:96:54:cc:64:4f:74:f6:cb:c8:09:
         b4:44:7f:ff:e6:19:ce:ea:48:33:67:94:4d:d5:7c:26:72:a3:
         55:57:73:6e:f3:3e:cc:24:06:8e:08:0d:1b:ae:2c:1e:24:60:
         99:6f:b4:2f:80:b0:c2:d8:d5:72:72:7e:f6:ba:f7:5a:01:06:
         6f:c2:6b:23:7c:1a:3a:f0:da:79:7d:11:65:f4:7b:23:af:40:
         c5:b6:fa:ba:0e:1b:65:c7:92:95:94:38:6f:4f:5e:6d:5c:4e:
         d3:86:13:83:65:63:70:d8:5c:df:1b:c9:00:c4:c5:d2:16:7f:
         7e:d5:a7:77:ed:f6:1f:10:70:59:49:62:40:6e:7c:f0:e7:99:
         18:80:a7:f0:3d:3f:2f:56:6c:b6:2e:f3:02:90:63:82:cf:b5:
         87:70:1b:b2:7c:f2:32:c5:7b:8e:8a:a0:d2:2a:f0:b9:e5:6d:
         b1:3c:20:6b:61:6b:44:c5:16:72:c8:4b:a1:06:87:4d:81:2f:
         3a:42:93:1f:8d:ea:dd:f8:b3:7e:e3:5b:e2:2c:1a:c0:7e:d2:
         93:3d:92:f5:1c:4a:55:30:a1:f6:e5:c4:5c:b9:8b:21:fe:50:
         82:81:92:92:88:42:5e:79:2c:80:c1:5e:1b:7e:4f:c2:55:63:
         2d:ce:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:07 2026 by rpki-client