Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.cer (raw, json)
Hash identifier:          OyLOXSSwn5z9l6/eBXOecpcUY3cHgzfGoaS4gfF3IEc=
Subject key identifier:   87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B30D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 May 2026 12:23:46 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 64096
                          IP: 43.228.180.0/22
                          IP: 103.47.200.0/22
                          IP: 103.103.176.0/22
                          IP: 103.212.56.0/22
                          IP: 116.206.0.0/22
                          IP: 2404:ff80::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176909 (0x2b30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  7 12:23:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:18:af:f0:6d:fe:df:8c:4d:71:4c:dd:1b:
                    90:fe:8b:21:06:b4:d6:3b:8a:5d:73:1b:63:f0:9d:
                    36:38:8c:be:01:11:46:42:a5:ef:66:6c:56:de:90:
                    cc:da:f3:32:d6:f8:2f:38:fb:d4:4d:1a:81:a1:e9:
                    ce:59:38:7a:14:e1:86:35:0b:34:3f:73:17:c5:b2:
                    00:3c:77:c6:18:53:28:99:76:fd:a7:2b:ca:cb:dc:
                    0c:62:29:ab:f2:2c:0c:db:be:4a:3b:9a:7c:18:b8:
                    25:3b:b8:06:c7:66:07:d3:5c:ad:da:68:fb:91:1d:
                    2c:db:ca:6c:1c:8e:3d:92:a3:99:45:0b:85:b8:28:
                    98:95:13:6f:b6:ae:18:9e:41:75:f2:c5:02:dd:2c:
                    90:d6:41:aa:f9:13:83:af:2f:5b:2a:1c:ab:e8:46:
                    ba:a5:a9:be:45:5e:dd:ed:09:13:ac:6c:5a:fb:e8:
                    c3:f8:6d:7c:07:0a:b1:6c:2c:d6:99:41:82:60:7a:
                    56:a4:6c:fe:6e:2a:35:09:0f:c0:da:4b:9a:fa:cf:
                    26:5b:fd:f2:3c:34:a8:46:b5:83:8b:8c:a4:c3:2c:
                    55:51:70:d5:1b:7e:ce:02:bf:ea:75:ff:c6:70:c2:
                    62:a6:d2:e0:27:c7:07:63:da:b6:e8:86:5a:74:60:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64096

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.180.0/22
                  103.47.200.0/22
                  103.103.176.0/22
                  103.212.56.0/22
                  116.206.0.0/22
                IPv6:
                  2404:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:f3:14:a8:2b:58:71:b9:dd:63:cc:89:3f:cf:e5:e3:e1:
         06:0a:c0:f6:07:fa:67:76:06:ac:2f:04:41:71:52:57:37:5c:
         9f:72:04:89:c3:ae:7f:90:2c:de:47:84:96:07:89:0a:b1:52:
         5a:6c:94:82:60:ad:ff:d8:32:b3:22:a5:7f:cd:3d:39:0c:fe:
         b0:f7:e8:23:0f:e7:4b:63:29:f9:53:83:fc:51:d2:da:b2:fd:
         6d:c7:7c:c5:5d:4c:68:c6:7b:69:e5:49:d2:29:ba:91:23:f8:
         37:ff:8d:12:cc:82:d3:e3:d1:ca:98:9d:b8:01:d8:1e:9c:d0:
         4c:83:a2:a0:81:14:60:21:ad:24:d5:90:c9:68:2d:1c:c9:89:
         60:b4:09:32:0a:c8:a5:19:81:bf:be:ac:7e:dc:b6:4f:95:1c:
         4d:c8:57:02:d2:8f:10:1b:11:1c:e7:d5:7e:e2:16:16:49:4e:
         f9:5a:9d:b4:f8:b7:cb:d7:26:6d:de:6b:32:d4:6c:b5:84:43:
         bc:cf:52:c1:be:96:15:66:10:07:f5:52:53:f2:40:77:b4:39:
         5c:db:fb:7c:78:c9:6c:93:0b:32:07:25:74:a3:ab:87:6a:15:
         81:6e:a1:3d:bb:ef:a7:84:31:22:a7:33:d9:31:ae:79:3d:e8:
         fd:9b:b3:cc
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIDArMNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNzEyMjM0NloXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTUxQzkxMTAvBgNVBAUTKDg3NUY0MDAyMUM2RDQzQjA0RUZFODk0
QTdGQzE1Q0M0RjZFRDg5QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDInBiv8G3+34xNcUzdG5D+iyEGtNY7il1zG2PwnTY4jL4BEUZCpe9mbFbekMza
8zLW+C84+9RNGoGh6c5ZOHoU4YY1CzQ/cxfFsgA8d8YYUyiZdv2nK8rL3AxiKavy
LAzbvko7mnwYuCU7uAbHZgfTXK3aaPuRHSzbymwcjj2So5lFC4W4KJiVE2+2rhie
QXXyxQLdLJDWQar5E4OvL1sqHKvoRrqlqb5FXt3tCROsbFr76MP4bXwHCrFsLNaZ
QYJgelakbP5uKjUJD8DaS5r6zyZb/fI8NKhGtYOLjKTDLFVRcNUbfs4Cv+p1/8Zw
wmKm0uAnxwdj2rbohlp0YJaJAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUh19AAhxt
Q7BO/olKf8FcxPbtibowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE1MUM5L0MzMDBDMkNFQzZGQTExRTdBQUFCQ0MwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNTFDOS9DMzAwQzJDRUM2RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4
dFE3Qk9fb2xLZjhGY3hQYnRpYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPpgMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCK+S0AwQCZy/I
AwQCZ2ewAwQCZ9Q4AwQCdM4AMA0EAgACMAcDBQAkBP+AMA0GCSqGSIb3DQEBCwUA
A4IBAQAJpPMUqCtYcbndY8yJP8/l4+EGCsD2B/pndgasLwRBcVJXN1yfcgSJw65/
kCzeR4SWB4kKsVJabJSCYK3/2DKzIqV/zT05DP6w9+gjD+dLYyn5U4P8UdLasv1t
x3zFXUxoxntp5UnSKbqRI/g3/40SzILT49HKmJ24AdgenNBMg6KggRRgIa0k1ZDJ
aC0cyYlgtAkyCsilGYG/vqx+3LZPlRxNyFcC0o8QGxEc59V+4hYWSU75Wp20+LfL
1yZt3msy1Gy1hEO8z1LBvpYVZhAH9VJT8kB3tDlc2/t8eMlskwsyByV0o6uHahWB
bqE9u++nhDEipzPZMa55Pej9m7PM
-----END CERTIFICATE-----
Generated at Wed May 13 04:28:29 2026 by rpki-client