Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer
File:                     b1bqmzoTdrDxragZkqO5YQgM4jI.cer (raw, json)
Hash identifier:          WMAY0VOIocnwrtPZYLJF/c8ID7QPVtuvYfpr5sVMyJ0=
Subject key identifier:   6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02667B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 20 Sep 2025 06:50:17 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 154250
                          IP: 203.210.92.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 18:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157307 (0x2667b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 20 06:50:17 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A915E084, serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:98:62:86:21:a7:30:7e:ab:1c:59:b4:e0:
                    ea:0f:d2:18:c9:a1:40:99:7a:19:61:6f:d1:f4:70:
                    fd:86:31:7c:78:15:43:04:3d:54:a5:27:f7:cf:14:
                    0d:81:5a:61:4a:3a:ea:0b:36:83:90:12:c1:00:38:
                    c7:70:f2:0c:21:d7:a2:d7:d7:ef:82:29:b5:3d:35:
                    49:7a:a0:5d:d8:26:67:f6:de:94:4a:ef:81:73:1a:
                    bf:b3:ce:81:65:4d:5a:f8:6f:8b:6c:ae:dc:8b:1a:
                    b2:92:bc:33:1e:f5:c1:91:c8:18:0c:1e:0e:3a:27:
                    13:cf:55:09:44:7f:c5:8d:aa:91:a0:b2:53:bd:a1:
                    af:f2:cb:27:31:c9:45:11:61:05:b1:50:c7:5d:e4:
                    7b:52:bb:38:9b:1f:cc:05:82:dc:f0:10:62:fa:73:
                    4c:29:1e:63:ad:71:df:2f:c7:cc:a2:4d:d2:8c:4a:
                    a1:42:57:f7:55:98:df:7e:0c:11:c9:21:3e:74:ac:
                    a0:f6:40:ed:9f:7f:f4:4e:fd:10:46:5e:39:76:25:
                    a6:79:8b:d1:e3:cb:8d:99:d6:b1:33:3b:72:e1:d8:
                    c9:0c:ca:a6:90:38:8f:b6:b5:d9:78:76:d2:fc:05:
                    d8:5b:0f:cf:23:f3:e2:8d:5b:f3:f3:04:2d:26:d7:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154250

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.210.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:a6:38:ae:a3:ea:13:19:c6:7a:62:71:ad:10:8c:1b:de:d1:
         61:ff:92:73:65:52:52:56:40:80:d3:fb:49:43:06:d3:a2:db:
         31:7f:39:6e:f2:0b:8f:3f:7c:64:70:f0:0c:e6:07:25:4e:a4:
         7d:a0:76:e3:3f:ee:af:7a:62:cb:45:9f:6d:c4:ca:eb:ca:2d:
         b6:3b:6a:a9:42:57:e0:7f:9c:02:21:47:b5:3a:6c:8f:2e:58:
         38:17:a3:c5:4a:72:ae:30:d8:eb:b2:a3:e5:aa:27:6b:6c:e7:
         97:0e:46:c2:15:2a:16:f6:5b:fd:09:fb:a8:4c:d7:f5:19:ed:
         c7:2e:3a:3e:95:2c:27:82:a4:05:8f:86:fd:4b:38:b7:e9:ee:
         01:e9:2f:bb:6c:e4:98:e7:25:b1:27:03:76:d0:24:b5:c6:28:
         6b:3a:29:d5:29:44:9c:0e:fe:03:f6:6a:98:5c:8a:af:f1:e0:
         4c:42:41:35:f6:30:ba:f2:fe:01:3c:b2:59:5b:44:aa:5b:2a:
         32:9f:c0:d5:87:45:a6:4c:c7:67:52:ad:44:1a:72:94:16:3b:
         a1:8e:92:94:b2:16:38:15:e8:88:83:92:cb:fa:11:09:1a:2c:
         cf:2d:2d:19:d6:7a:90:bc:b4:a8:49:5b:a4:47:fb:be:e5:c3:
         56:8e:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:09 2025 by rpki-client