Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
File:                     bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer (raw, json)
Hash identifier:          XB/JeanKbmxrHyFA2EnqU4nMzqlSiSsQTHRvpN1eNmw=
Subject key identifier:   6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C196
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jul 2026 09:25:57 +0000
Certificate not after:    Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 134352
                          AS: 135272
                          IP: 103.61.12.0/24
                          IP: 103.61.15.0/24
                          IP: 2404:8b80::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180630 (0x2c196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  1 09:25:57 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:6c:31:ef:03:df:a9:50:d4:28:84:d7:e8:
                    64:ed:f4:94:c1:28:91:c2:39:58:0b:96:64:c4:2b:
                    9a:4c:1b:a5:45:36:91:05:9d:d0:6b:bd:4a:56:ff:
                    50:bc:07:e9:90:b0:cf:32:1e:7b:25:61:ea:b3:c2:
                    b2:07:4f:87:72:8f:41:55:bd:05:27:11:50:97:d0:
                    56:05:e0:db:92:2f:48:88:76:60:de:2c:db:4a:64:
                    38:cc:3c:76:88:12:22:12:fa:4b:dd:c6:a4:16:f9:
                    c2:43:fc:d0:d3:23:e3:14:76:64:64:40:fc:fd:77:
                    8e:56:dd:12:11:e0:02:4c:12:28:e6:06:3c:72:c5:
                    9d:4f:52:69:b1:d8:45:ef:54:87:b0:a2:6a:61:42:
                    02:30:13:19:75:60:e9:b7:bf:a9:ea:c2:ea:8e:06:
                    41:c7:09:ea:a4:49:fa:31:4a:33:39:8d:f5:47:5a:
                    4b:ec:d8:be:c9:5b:49:cc:18:9e:86:e5:bd:bc:96:
                    2b:23:5a:10:ca:0b:5c:31:45:fe:41:f1:4a:9b:86:
                    c2:5d:7a:03:38:90:6c:bf:03:1f:ff:91:4b:cc:e5:
                    3e:1f:6f:4b:26:99:89:19:ae:c0:e2:62:88:8c:69:
                    88:f7:b0:42:f1:b4:b6:b4:de:fe:b8:01:d9:66:f7:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134352
                  135272

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.12.0/24
                  103.61.15.0/24
                IPv6:
                  2404:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:3d:bf:e6:70:38:38:b5:be:fd:b0:bf:08:29:62:3d:64:3a:
         9c:a5:6b:cb:52:38:8d:32:89:a0:6c:99:29:6f:ec:fd:c9:aa:
         b0:7a:25:56:fc:5f:f6:f5:65:d0:b4:f0:ff:c6:93:71:ec:ba:
         08:9e:b1:51:64:6c:82:9d:c5:4f:d7:21:71:3d:96:30:4d:a9:
         73:96:5f:80:53:f5:59:5b:84:b5:4c:36:db:5d:7b:b5:3f:6a:
         13:d2:28:0a:57:5a:aa:59:b1:b2:d7:32:ae:b3:8e:8b:fc:68:
         65:0b:f5:5c:7a:8f:13:2a:61:87:8d:9a:7f:08:5b:8d:2b:ef:
         87:aa:66:d6:3d:4c:67:31:06:42:5e:bd:35:ef:5b:26:8c:65:
         00:5c:22:3e:d7:c4:3a:7a:40:c5:56:3e:48:b4:91:53:e4:50:
         aa:f4:d3:cf:77:a4:0d:f2:ac:d8:f5:6f:95:86:8e:5f:ff:a4:
         b1:bf:96:2c:c7:b6:29:b3:fc:73:1d:eb:35:1f:11:ea:57:c9:
         15:c4:82:be:44:85:e4:e1:13:8d:87:3c:32:9a:d4:65:64:27:
         a2:4e:3c:2c:ad:df:bb:65:16:19:5d:ed:af:7b:54:9d:4f:b7:
         48:69:1a:dd:7d:02:1a:b9:13:22:1c:95:8f:db:b2:fb:97:70:
         58:ce:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:12 2026 by rpki-client