Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
File:                     eAtbxs5eRpg3res2hXTtSDBIAcs.cer (raw, json)
Hash identifier:          6TtUhbMWzdLsvoIFJalouof2zNWkfd2+skcB/7oxwz0=
Subject key identifier:   78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A4DB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Mar 2026 13:58:55 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 152844
                          IP: 103.154.132.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173275 (0x2a4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 17 13:58:55 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:36:cd:ee:4c:eb:2f:6a:ba:b9:19:06:93:
                    f5:b2:1f:a0:33:8b:0f:08:3f:9e:97:38:3d:ca:cc:
                    39:19:96:3d:70:a9:6a:ac:0f:3f:90:46:07:db:2b:
                    47:69:4d:96:ef:66:92:e7:7b:14:88:84:f8:d5:28:
                    87:03:97:2b:c0:a8:86:38:c9:57:f1:ac:b7:93:42:
                    51:1d:9c:99:93:22:92:b8:bf:d8:9f:08:e4:17:08:
                    98:bd:24:0a:33:89:56:3b:6a:06:dd:3c:7d:ae:c6:
                    58:99:9f:49:f6:d9:0d:31:3e:ef:83:18:0a:b6:2a:
                    08:51:b0:54:b0:eb:c6:47:52:98:25:18:1e:2a:b7:
                    31:af:7e:bb:88:ff:a0:52:d0:a1:c0:ea:f2:84:5c:
                    a8:ce:78:11:ca:5d:d1:1a:78:ea:df:47:87:29:c0:
                    3e:73:99:2d:c6:e0:23:1d:a9:8c:c5:50:80:59:15:
                    82:36:fe:60:51:e4:5f:c6:d6:8a:83:b2:84:87:fd:
                    f8:92:b8:64:42:8a:0e:1c:3b:23:15:97:1a:5a:23:
                    61:5d:43:21:b3:b2:87:bb:38:f9:39:c2:f4:f9:27:
                    17:8e:6b:ee:2e:a3:65:e6:21:50:7c:e1:c0:1f:8a:
                    c2:16:76:6e:aa:d3:d2:e2:ec:c7:07:18:83:82:dd:
                    39:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152844

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:12:1e:c2:12:0b:61:d5:d2:12:09:85:bb:05:a3:16:78:
         b4:e9:5f:4b:f1:3a:cb:d0:8e:ec:f5:c2:95:0f:9f:7e:d2:67:
         fd:a8:c8:6a:da:2f:6c:42:6c:06:14:30:c3:44:fb:d2:68:ab:
         1b:26:38:cf:83:a3:a1:5c:39:20:25:e8:11:a7:d7:e4:27:7b:
         58:ee:a6:17:a0:73:72:53:a4:4b:e3:db:ea:18:02:99:f5:11:
         71:ac:39:d8:59:ab:5b:e4:54:ab:54:1e:8d:4b:4b:a4:87:06:
         d1:ac:e2:f5:9c:89:a5:75:b2:2d:32:22:ca:26:ad:fa:a2:7d:
         d3:a2:11:05:ed:9a:46:7f:f2:d0:83:ab:24:d9:79:6a:7d:a1:
         09:95:a9:b4:45:e3:a5:4f:25:38:cf:f8:46:b0:4b:35:69:d8:
         eb:e3:d1:44:30:99:cf:6d:c2:c0:1a:4c:ad:68:1d:47:e8:ab:
         3a:9c:7e:85:52:d2:01:95:74:3f:83:a3:71:82:b3:16:f4:f6:
         76:1f:90:e1:b2:ba:60:33:95:9d:69:ef:f2:3b:5b:fe:f8:8f:
         ba:88:69:9a:db:f1:fe:67:f4:73:62:18:58:5e:8c:bf:5f:0b:
         fe:a5:32:52:e5:32:ae:d4:ba:24:44:ab:ca:46:23:4c:66:bd:
         88:51:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:03:39 2026 by rpki-client