Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
File:                     gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer (raw, json)
Hash identifier:          LUrthky4W6PwSplxrOhthOtUNEigX8hy9QowWrM3o4U=
Subject key identifier:   83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02ADC5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 21 Apr 2026 05:47:20 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 137944
                          AS: 139800
                          IP: 103.117.248.0/22
                          IP: 103.145.90.0/23
                          IP: 2403:22c0::/32
                          IP: 2405:7ec0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175557 (0x2adc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 21 05:47:20 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A915FA57, serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:67:41:83:f5:90:f3:36:2f:61:3b:4c:be:
                    85:6c:45:f3:43:90:87:1d:bd:4d:d0:95:90:eb:6a:
                    03:a3:2a:c0:06:b3:02:59:2b:63:e0:eb:aa:83:a3:
                    65:b9:4b:b5:c0:a7:89:96:2b:d0:3c:a9:01:2b:28:
                    ab:01:6b:5c:6a:7b:8d:83:77:cb:c4:cf:34:5e:f9:
                    09:8f:85:fc:80:d6:39:94:c3:49:c0:d2:30:35:18:
                    dd:9a:eb:27:85:1a:a9:32:ae:0a:84:f5:68:85:0d:
                    63:c1:40:43:6e:a0:c7:28:ab:1f:28:b2:d9:46:c5:
                    37:79:05:40:18:89:78:23:de:61:59:88:1b:8c:83:
                    e9:30:07:0b:e1:e9:ed:5a:db:39:ce:64:2e:dd:fd:
                    13:2e:60:20:98:c3:c0:77:6c:58:22:84:53:48:97:
                    b3:87:97:06:3f:43:fd:a0:36:f9:66:cc:d5:d8:a6:
                    06:04:6b:b2:6b:f7:31:de:71:1a:9a:14:48:e3:e0:
                    95:85:79:62:b2:2d:4f:92:1e:bc:4c:aa:a8:ba:58:
                    75:82:86:56:0b:3e:de:a2:34:1d:eb:b3:a9:fa:97:
                    11:32:8f:72:00:ee:01:0b:94:a5:cd:39:16:a3:85:
                    0d:b6:c7:7e:ff:a0:f5:f1:01:d2:ed:89:82:28:db:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137944
                  139800

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.248.0/22
                  103.145.90.0/23
                IPv6:
                  2403:22c0::/32
                  2405:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:54:58:2c:e0:ec:f5:df:98:3b:fe:a6:6a:a6:f9:1c:7b:3e:
         75:12:78:18:b1:08:08:d6:b4:51:ac:b0:e1:f5:0c:ad:d0:2f:
         50:9e:7e:13:d7:0f:0e:2c:fa:0d:ba:17:c7:77:37:72:8d:3e:
         19:54:9b:32:4a:d9:43:5f:1f:af:4c:46:11:d2:96:3f:09:62:
         8f:78:47:2f:a4:5f:92:e2:68:20:af:36:38:ee:4c:3c:8c:ec:
         ee:44:5a:98:18:e6:cf:b7:5d:7f:66:63:4a:00:da:20:6a:ef:
         3f:d4:e4:0b:73:46:32:6f:51:0f:dc:bc:2e:fe:75:e7:67:28:
         49:49:ea:d1:65:a7:39:bc:34:12:08:6e:ee:53:be:a8:1b:79:
         dc:5b:98:43:d0:97:ab:2d:10:37:1d:e0:3b:85:bb:77:b6:7a:
         5c:08:bb:23:f1:5b:ac:98:b3:cd:73:ee:50:94:a0:87:10:11:
         5e:31:31:4e:7a:80:43:11:83:a6:3f:f1:01:ff:19:02:84:fc:
         a6:d3:48:30:eb:b7:9a:21:50:51:e8:a9:49:ef:81:bc:8e:32:
         47:ca:57:de:ef:d3:46:ab:f9:54:91:e1:ce:a0:04:5b:ed:b8:
         ab:d0:df:ef:db:1d:6b:65:85:55:96:29:b7:5c:23:1e:f7:6d:
         5f:43:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:04 2026 by rpki-client