Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
File:                     g1KnNOghRPMixQtyik92WjPXIlY.cer (raw, json)
Hash identifier:          jDkFEowY+gF0UJ6/LOgr8Ris0tb8ziYfjI1ewctBaj8=
Subject key identifier:   83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C292
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 03 Jul 2026 13:31:32 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 152591
                          IP: 103.151.46.0/23
                          IP: 2400:3fa0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180882 (0x2c292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  3 13:31:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:56:17:cd:3b:1c:52:4d:8f:02:bc:df:53:
                    8b:64:41:1c:57:b5:7a:ca:1c:9e:55:ff:6c:09:78:
                    1c:f9:0d:ce:d8:28:c6:56:d4:78:49:ac:9f:b3:79:
                    e6:0d:dc:20:e7:2b:fb:8d:0b:a4:7a:8b:af:6e:1c:
                    bb:ee:7d:e5:0e:60:56:b0:87:36:0b:26:12:c3:9b:
                    6c:93:8e:cb:2b:cf:7a:9c:6f:df:f9:e3:f6:2f:b2:
                    53:58:86:36:81:dc:f5:d1:e1:ae:67:91:02:15:ac:
                    1c:15:a6:84:df:13:9a:d3:9e:c7:95:11:c1:82:1b:
                    f3:d3:e3:a9:bb:93:a7:7f:4c:2f:97:07:9e:fb:8b:
                    b9:97:b8:c0:4e:4e:92:7a:5b:ec:0c:85:ff:eb:f3:
                    2f:10:fe:3c:17:cf:cb:56:5b:84:48:e8:fb:46:d7:
                    e9:2f:94:7e:82:8a:01:0a:81:1a:da:63:9b:fa:8e:
                    40:45:4e:67:5b:da:cf:d2:0f:a4:b0:35:25:cd:c6:
                    8b:ea:dc:f7:da:b8:18:29:22:4f:e0:27:94:bf:f8:
                    0e:44:0f:5f:33:80:ec:b5:a1:52:84:9f:2b:44:a7:
                    d3:37:ce:8d:5b:7f:0a:93:88:fe:ed:88:43:03:c0:
                    d5:b9:5f:98:5b:93:7f:1b:fb:5d:1e:dd:a7:ac:26:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152591

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.46.0/23
                IPv6:
                  2400:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:2f:3f:a4:03:2a:e2:14:42:ed:e9:ff:69:42:c3:1b:5b:
         9a:6e:41:12:27:f9:64:1d:91:56:78:01:d2:9b:30:2e:47:be:
         0e:19:e6:81:95:60:82:8a:b7:14:f2:7b:b1:dd:50:6d:62:ee:
         53:8b:8f:37:7c:7d:40:3a:5e:9d:bb:34:5a:9b:52:22:93:16:
         55:99:34:58:55:2f:82:c6:d4:7c:77:00:e0:fb:3f:58:ed:c9:
         96:57:36:24:7f:ef:06:01:e7:a3:00:25:01:1c:25:ec:85:8d:
         f6:fe:84:e1:26:69:b9:12:cb:0a:fa:25:68:3e:bb:39:7f:64:
         1a:f3:ca:75:8a:ae:82:71:51:5f:fb:91:50:41:63:f3:31:f8:
         cb:32:83:48:01:59:08:4f:f4:78:19:9c:dc:a3:5e:74:6d:b7:
         9f:68:76:8d:d2:f0:e6:e9:e9:c3:f1:66:77:bc:6c:3c:f1:16:
         35:6a:7f:4d:d3:02:1f:d3:50:16:ca:c4:a2:8e:57:c3:b6:52:
         8f:86:fe:f8:35:32:be:59:80:d1:69:23:20:21:16:d3:a9:35:
         37:cd:29:f9:29:2a:2a:87:c3:62:cc:8f:13:1e:c6:66:61:11:
         c4:03:11:c7:57:0f:17:fe:82:5e:ab:dc:36:1c:9a:14:51:27:
         ed:94:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:42 2026 by rpki-client