Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
File:                     _MUE2ks5jGbdvyw5K3UZzJDBoQk.cer (raw, json)
Hash identifier:          CLK3Q16OJE3ZDhikXtDUD7ulYoearLcZLmq2+JC746s=
Subject key identifier:   FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A462
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 15 Mar 2026 12:34:05 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 140215
                          IP: 103.148.176.0/23
                          IP: 2001:df2:e080::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 04:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173154 (0x2a462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 15 12:34:05 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:fb:2c:c5:84:70:21:f8:93:b8:62:a9:0c:
                    47:3b:d3:c2:51:39:6e:8e:82:21:b3:73:35:8c:69:
                    d7:a4:b0:62:ea:94:30:47:88:77:3b:be:58:98:a1:
                    dd:3c:a5:9c:e7:90:3f:a0:9b:fe:ad:a1:3a:93:3f:
                    5e:05:0d:9b:ec:2e:7e:b7:47:47:13:1e:77:bb:53:
                    b1:af:3a:a8:63:a0:05:b8:ac:13:5d:b9:e0:b3:70:
                    3b:a3:0f:0e:7e:dd:d7:88:cc:0b:92:08:8e:61:4f:
                    40:8a:2b:79:1f:32:54:fe:94:42:dd:5a:d9:36:47:
                    b0:a2:ee:7f:02:46:52:82:ce:78:07:cc:48:ef:f7:
                    66:c2:bc:27:d4:21:8a:ee:78:22:4f:dd:6f:e7:45:
                    4f:b1:64:0a:7d:fc:b2:d2:44:36:c5:38:74:be:f2:
                    ab:bb:f7:ae:b8:4b:f5:3f:f9:35:85:05:bf:68:67:
                    82:46:ba:85:0e:5c:db:97:77:58:5d:0b:8d:3f:90:
                    07:e8:59:98:9d:52:25:d5:0d:2e:69:fc:c7:65:10:
                    85:e7:c4:8d:e6:b2:59:2f:69:12:c7:2d:f9:90:a6:
                    80:d0:d2:8e:36:c1:df:fa:4b:c4:b5:a4:4d:cd:80:
                    33:69:07:46:69:f1:c6:29:b6:78:33:4d:e3:ca:ab:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140215

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.176.0/23
                IPv6:
                  2001:df2:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:6b:16:a9:9b:86:0f:1c:bb:d2:86:31:96:61:16:6a:70:
         a1:36:54:0d:40:d7:a5:05:89:a1:4f:2f:bd:c9:81:4f:52:ee:
         ab:a3:0d:e5:e5:21:31:8c:41:da:f2:f8:4b:6c:12:76:2f:87:
         b9:cc:19:d4:23:a6:71:c2:02:0b:9e:54:b6:41:6c:61:80:f1:
         a2:8a:2b:5f:59:6d:55:f6:79:58:8e:33:14:76:3d:17:37:2e:
         6c:f9:42:8f:de:73:a0:22:1f:61:ad:ca:e1:9b:f2:07:6a:c6:
         8f:cd:60:f1:b1:92:da:e9:13:26:95:ee:4d:3f:7a:2f:c2:36:
         b4:9f:c0:59:b1:a2:f3:37:bd:1f:f4:31:e6:1a:3f:f3:f9:c7:
         81:cd:fe:c0:30:2e:78:65:7d:10:a7:be:c9:2b:e6:c5:54:84:
         18:94:f6:72:56:ce:c8:c7:28:a9:9d:ec:4e:9f:fa:cd:7b:a4:
         f8:15:de:20:66:65:13:1d:b4:e1:74:9d:c6:9c:c5:72:e7:58:
         9a:eb:a4:a5:3f:91:3e:ea:f9:dd:41:09:f4:24:ff:72:4e:03:
         90:0b:6b:21:d8:e0:0b:ed:75:1d:97:1c:4b:b9:43:57:28:94:
         36:cb:45:b8:09:15:ef:dd:fd:ce:21:f0:03:f3:7f:36:c4:a5:
         4b:60:13:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:07 2026 by rpki-client