Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
File:                     h8MVYTVzTVYviayugrfBqOytOao.cer (raw, json)
Hash identifier:          hzeODbd+7x+QXqVWEtyTlUcz+jL+FEo5J1ygxAp0m1k=
Subject key identifier:   87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B29A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 06 May 2026 03:24:54 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 138962
                          IP: 103.137.190.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 12:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176794 (0x2b29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  6 03:24:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:81:89:2c:39:e6:98:92:24:fa:c5:b3:47:
                    43:d4:7b:1c:9f:0a:be:a6:b2:1d:b9:47:04:3e:89:
                    3c:f3:6e:a8:b9:76:22:d7:e2:73:d4:2d:21:be:ff:
                    b5:d1:bb:20:b6:6e:d6:c0:05:74:8b:ac:18:23:15:
                    5e:0e:59:b2:0a:34:83:c4:8f:6c:95:d9:33:f0:3b:
                    89:a9:f0:1f:04:0c:db:ac:bd:3c:ff:48:38:77:c9:
                    af:78:bf:83:dc:93:23:1f:9a:89:c5:ad:00:4e:44:
                    f6:c7:06:de:8b:65:57:88:11:01:c1:03:0e:b6:41:
                    20:15:26:ef:87:c6:dd:f7:28:26:96:fc:4e:89:86:
                    c3:65:c0:df:bb:e0:4f:f1:60:1a:0a:85:9f:f7:6f:
                    b8:3f:f9:9b:c0:03:c4:40:8a:07:fe:52:4a:09:ac:
                    22:22:55:42:f6:22:09:6c:e0:73:c5:56:5e:17:cc:
                    93:84:d8:ef:6b:ae:b7:7a:e3:e7:46:85:03:26:40:
                    69:8b:84:cb:71:ce:c9:d1:d7:de:9d:03:61:7a:1d:
                    40:89:c9:fb:ba:49:9d:e2:11:43:f0:74:7a:e0:dc:
                    30:08:a7:5b:b4:43:b2:fe:06:94:04:bf:7f:9e:55:
                    b9:b2:37:ec:9a:95:bd:2b:55:6c:86:8a:28:d1:7c:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138962

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:0c:9c:e0:63:c7:71:1d:4a:ca:89:3a:ff:06:8a:04:42:cd:
         d5:9e:72:ef:62:aa:ef:97:93:27:ea:b2:81:f5:54:ec:9d:0f:
         83:db:b8:79:bb:d8:5b:70:f7:cb:bd:f6:d8:a3:75:13:24:8c:
         80:cc:8d:88:15:12:e7:50:1d:5d:fe:44:4b:4b:ad:e0:84:f6:
         fe:4b:3b:bb:25:2b:52:87:c1:af:2d:3c:45:24:98:cc:e9:ae:
         2a:22:52:2a:52:5f:51:28:55:31:ad:4c:12:65:fb:bf:f7:f9:
         9f:7d:47:63:e0:9d:70:4a:4a:0d:9d:f7:01:e2:f4:43:fb:57:
         dc:39:7e:ab:ed:37:97:fd:30:e3:6d:98:6e:f3:ad:4b:d7:a6:
         4e:f7:9a:3e:da:c3:aa:94:3b:dd:a5:ec:cc:c6:3d:ea:9f:de:
         fa:09:b4:9a:05:af:4f:09:d8:b1:20:69:99:4d:cd:09:e7:31:
         18:34:e6:e8:5f:2b:91:b0:45:46:51:48:f1:f6:16:86:48:fb:
         7d:3f:c5:7b:58:bb:55:9b:28:39:00:d7:65:f9:de:70:76:76:
         f8:1c:49:19:20:96:78:82:79:27:e1:06:b4:f6:55:e8:f4:fb:
         17:b7:b7:b0:20:61:e9:35:20:9d:66:ef:60:5b:77:6d:57:e3:
         3a:fe:dc:87
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDArKaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNjAzMjQ1NFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjgyMUExMTAvBgNVBAUTKDg3QzMxNTYxMzU3MzRENTYyRjg5QUNB
RTgyQjdDMUE4RUNBRDM5QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnEIGJLDnmmJIk+sWzR0PUexyfCr6msh25RwQ+iTzzbqi5diLX4nPULSG+/7XR
uyC2btbABXSLrBgjFV4OWbIKNIPEj2yV2TPwO4mp8B8EDNusvTz/SDh3ya94v4Pc
kyMfmonFrQBORPbHBt6LZVeIEQHBAw62QSAVJu+Hxt33KCaW/E6JhsNlwN+74E/x
YBoKhZ/3b7g/+ZvAA8RAigf+UkoJrCIiVUL2Igls4HPFVl4XzJOE2O9rrrd64+dG
hQMmQGmLhMtxzsnR196dA2F6HUCJyfu6SZ3iEUPwdHrg3DAIp1u0Q7L+BpQEv3+e
VbmyN+yalb0rVWyGiijRfC2lAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUh8MVYTVz
TVYviayugrfBqOytOaowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4MjFBLzI0MkQ4NDY2NDhGQjExRjE5OEUzRTNEODkyODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCODIxQS8yNDJEODQ2NjQ4RkIxMUYxOThFM0UzRDg5MjgzMzc3My9oOE1WWVRW
elRWWXZpYXl1Z3JmQnFPeXRPYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh7SMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4m+MA0GCSqG
SIb3DQEBCwUAA4IBAQC8DJzgY8dxHUrKiTr/BooEQs3VnnLvYqrvl5Mn6rKB9VTs
nQ+D27h5u9hbcPfLvfbYo3UTJIyAzI2IFRLnUB1d/kRLS63ghPb+Szu7JStSh8Gv
LTxFJJjM6a4qIlIqUl9RKFUxrUwSZfu/9/mffUdj4J1wSkoNnfcB4vRD+1fcOX6r
7TeX/TDjbZhu861L16ZO95o+2sOqlDvdpezMxj3qn976CbSaBa9PCdixIGmZTc0J
5zEYNOboXyuRsEVGUUjx9haGSPt9P8V7WLtVmyg5ANdl+d5wdnb4HEkZIJZ4gnkn
4Qa09lXo9PsXt7ewIGHpNSCdZu9gW3dtV+M6/tyH
-----END CERTIFICATE-----
Generated at Wed May 13 15:03:00 2026 by rpki-client