Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer (raw, json)
Hash identifier:          9tRclkgwimSn41oWPJaM25qOrtxTlbzFv1K0EUrS7B0=
Subject key identifier:   79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C52D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 12:24:02 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 151465
                          IP: 103.229.188.0/23
                          IP: 2001:df2:9ec0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181549 (0x2c52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 12:24:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:1b:23:2b:3e:bd:10:ab:18:64:02:aa:b5:
                    66:22:19:38:bd:ed:a2:af:d8:c2:6c:ab:7a:6e:0c:
                    d3:3b:49:6f:15:77:59:17:82:4f:75:9b:1d:76:89:
                    5f:83:1a:c7:4a:76:6e:87:4a:e0:19:9a:82:c4:ed:
                    41:09:05:c5:be:bb:33:17:3e:ee:c5:77:42:fe:d8:
                    ed:f9:33:4d:3c:f6:d2:99:5f:9c:c7:ca:6c:6a:0e:
                    d2:08:61:26:bc:b1:f4:a9:e7:df:7d:66:55:52:58:
                    25:a3:60:e2:1e:bb:e5:35:d8:03:a4:35:ce:f6:33:
                    74:e1:f4:c4:1e:04:76:76:19:ee:66:90:94:36:cc:
                    c1:30:f2:15:3c:75:3f:7f:f3:c9:cc:0a:b4:6b:26:
                    33:f3:a4:3f:2b:09:8e:f5:fe:f5:43:2d:22:98:2c:
                    63:eb:cd:e2:53:f6:5a:81:b5:fb:47:fb:17:76:01:
                    a3:23:43:9f:41:27:7c:1c:36:92:4e:00:23:c2:2c:
                    66:d3:17:7c:c3:ba:ce:94:ea:96:dc:3a:be:af:a5:
                    4e:4c:fc:1b:91:f2:0f:e5:66:50:6f:17:7a:08:50:
                    95:bc:16:e9:f6:c0:44:07:d9:28:eb:62:ae:6a:71:
                    3d:5c:af:72:e9:62:3e:fb:21:2d:6f:5b:fb:d6:fd:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151465

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.188.0/23
                IPv6:
                  2001:df2:9ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:ae:e7:87:c5:96:00:07:4b:02:23:68:e7:66:1b:82:5a:
         15:9b:31:6c:a9:2f:3d:d4:18:24:52:67:59:ff:f0:05:0c:13:
         22:52:9c:fa:e7:be:38:82:a9:42:e3:0b:86:b5:30:6b:21:1a:
         c9:f7:d9:bf:9b:0c:f5:7c:21:74:ab:f6:41:e2:55:d2:8f:0d:
         77:f4:10:b0:99:a1:b4:02:6e:02:ff:a2:fc:6b:16:ff:0a:6f:
         cb:67:74:b6:29:29:fa:56:72:b5:20:33:31:58:a5:24:e6:b4:
         b7:ec:ff:a0:d3:e8:43:6f:40:02:d5:f4:ca:d2:b5:cc:af:a0:
         0b:be:01:68:93:d2:ff:af:42:50:a3:72:d4:f2:0b:be:d3:1c:
         34:7c:a7:46:19:37:4b:43:61:70:9f:26:07:15:85:9d:12:ac:
         6b:66:ea:fe:44:c5:97:0e:6f:ab:e2:4c:4c:b1:c0:3a:68:f8:
         a8:27:4c:5b:76:30:db:15:fd:43:b5:f3:5a:f3:70:7a:d3:82:
         af:79:ac:bc:3a:3f:4f:59:1c:57:49:78:db:ff:59:00:a9:ea:
         42:27:cb:85:fb:f2:2a:6d:d2:c1:8d:27:0a:e0:99:22:58:10:
         77:af:6b:db:6f:9e:77:19:45:18:a0:cb:fe:d2:e3:e0:75:4d:
         df:9b:03:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:30 2026 by rpki-client