Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e169sma-bUqEEPzCjQ1bAHPL1L4.cer
File:                     e169sma-bUqEEPzCjQ1bAHPL1L4.cer (raw, json)
Hash identifier:          DZHrzvG31vn2LgM+uAVncnO3l+gPAD+aGw36lXRV6nE=
Subject key identifier:   7B:5E:BD:B2:66:BE:6D:4A:84:10:FC:C2:8D:0D:5B:00:73:CB:D4:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B247
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B434C/DAC7B480482411F197600CAB8E833773/e169sma-bUqEEPzCjQ1bAHPL1L4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B434C/DAC7B480482411F197600CAB8E833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 05 May 2026 01:50:59 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 133431
                          IP: 103.228.188.0/22
                          IP: 2400:d480::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176711 (0x2b247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  5 01:50:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91B434C, serialNumber=7B5EBDB266BE6D4A8410FCC28D0D5B0073CBD4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:23:f7:80:92:a9:f0:a7:40:07:6c:26:d9:
                    06:7e:6b:8b:6f:2a:6a:a0:8c:20:7f:dd:30:f0:50:
                    49:01:bb:e9:94:34:3c:e1:ae:f9:e5:ad:b3:7a:bd:
                    02:6c:2c:06:89:01:0f:b5:5c:6a:0d:a6:fa:fc:f4:
                    a8:ef:dc:2c:f2:99:28:a3:00:4e:2d:3b:88:8c:82:
                    1d:33:c0:3a:d0:d4:f2:a5:13:9f:87:ec:36:a1:5f:
                    70:df:8c:d9:cf:b2:df:b8:41:64:6a:a6:39:cf:be:
                    74:cf:2b:87:28:d6:dd:af:11:4b:b0:80:c9:7b:88:
                    95:44:a3:70:6e:9f:b7:cc:bb:5a:db:30:7c:2c:a3:
                    be:c6:9d:59:2e:f3:3a:85:71:11:6b:9c:1d:f9:a2:
                    5f:24:33:a3:f4:3e:f4:5c:6d:c7:ed:d5:79:33:40:
                    cc:fd:89:a4:94:18:4a:c4:b3:f6:3f:d3:64:43:df:
                    e4:c9:ab:ed:0a:d8:f2:40:d5:6b:90:d0:e0:44:f5:
                    54:73:75:4b:a7:d7:db:e0:40:b3:30:ca:b6:5e:72:
                    5d:6f:b6:ed:dc:a8:e4:72:51:8a:66:d5:5e:7f:0e:
                    68:56:23:54:1a:20:ae:fa:e2:bb:ab:cf:1c:be:6c:
                    52:8c:b6:42:bf:e5:e7:f8:e4:1b:95:91:33:7f:27:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5E:BD:B2:66:BE:6D:4A:84:10:FC:C2:8D:0D:5B:00:73:CB:D4:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B434C/DAC7B480482411F197600CAB8E833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B434C/DAC7B480482411F197600CAB8E833773/e169sma-bUqEEPzCjQ1bAHPL1L4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133431

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.188.0/22
                IPv6:
                  2400:d480::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:15:57:6e:2d:82:20:e4:e8:1f:c8:23:eb:d8:40:51:51:27:
         8b:2c:4a:58:e5:cd:31:04:38:b7:e9:ef:df:ef:f8:84:9a:1a:
         14:85:b3:de:72:14:7f:d1:9e:ff:5f:d2:de:75:e4:90:51:97:
         13:3e:c4:37:90:bb:d1:48:29:c9:59:e2:1d:88:44:a3:5d:9c:
         04:7d:4a:a5:15:df:f6:5c:a8:5b:ff:1c:20:9f:2c:b0:b8:f6:
         0f:cb:8e:20:2f:eb:c0:01:87:ad:49:4f:7b:79:77:9e:1a:2c:
         56:7d:70:5a:da:5f:53:b0:8e:d6:40:06:c2:43:41:46:d5:94:
         c4:87:1c:ee:70:14:84:2b:4a:05:97:f1:0b:c9:a0:bc:ac:dd:
         fb:65:d7:65:83:0c:b8:c4:68:2b:54:7e:72:42:5d:6f:5d:f8:
         ff:55:43:23:c0:05:07:b5:1a:3d:38:cd:2e:e0:e6:9c:f7:69:
         92:46:e1:82:02:3c:f4:6b:d0:b7:37:a2:eb:f5:ef:6d:82:92:
         ef:dc:79:06:ae:69:f5:24:ab:14:66:cd:e7:70:bf:b0:3d:b0:
         5e:1d:07:92:54:e1:90:36:c3:10:f4:05:0e:75:02:7e:86:8e:
         53:73:8a:cd:7d:fa:48:a3:34:23:42:da:cf:2d:0c:3f:4a:ff:
         d4:a6:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:54 2026 by rpki-client