Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer
File:                     kBdT4_LIclCGbxxHOQChAP1Mq1M.cer (raw, json)
Hash identifier:          wFzZJWO4xbwbB0ORhpr3FYdyR8V6L6n3BZFpNO/t2ho=
Subject key identifier:   90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C3FC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 09 Jul 2026 02:59:19 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 133404
                          IP: 103.227.15.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181244 (0x2c3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  9 02:59:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:d7:3e:d8:6d:37:ae:d5:4c:37:30:e4:7f:
                    ac:8d:f8:2e:1e:c8:38:36:d0:b9:e6:24:94:9d:21:
                    6a:b8:a9:08:e6:de:7f:14:ad:d8:6a:02:d1:f4:d9:
                    6c:49:f6:0f:c0:36:f0:a8:03:93:88:4a:a4:e7:f2:
                    5e:8e:37:8c:34:71:7b:47:3c:c6:82:24:0b:5c:98:
                    9c:a4:ea:c5:11:be:08:3a:77:ee:a1:72:6c:3c:13:
                    af:0e:85:e2:56:e3:63:8c:20:f1:f1:f5:5a:a6:63:
                    b1:c2:d1:75:0b:01:94:db:01:0f:16:e8:1c:9d:5a:
                    19:30:6a:f3:40:78:ba:0e:60:25:dd:fb:b0:1a:9b:
                    39:2a:b2:b0:12:ae:dc:ac:7e:f4:0b:a0:ea:bf:25:
                    59:70:5d:e1:3e:01:64:c5:26:26:92:91:f6:7a:84:
                    f2:fb:14:c0:aa:8c:f6:13:d6:64:d8:ac:a1:2a:36:
                    29:f5:4f:75:db:a9:65:a0:1a:8e:a3:ed:0e:75:5b:
                    44:a9:d4:4c:2c:42:88:ee:c6:99:39:28:e7:4c:61:
                    60:98:b8:c1:0e:2d:eb:f5:05:2b:5a:fd:fb:0c:23:
                    c4:91:72:bf:a3:42:3f:80:ee:43:72:2b:cb:cf:90:
                    b4:ec:4f:45:36:f7:ab:df:5b:06:03:2f:06:da:6d:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133404

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:12:6c:28:f9:e9:03:0d:9c:7a:7a:b9:f2:22:9f:29:59:
         3d:3e:63:ff:b9:2e:74:0d:d6:fc:12:b6:fd:91:48:10:7b:ea:
         67:21:12:08:23:93:a5:cd:df:e3:3c:70:8a:fb:93:44:b5:07:
         46:05:80:c7:0d:b3:6f:f4:89:5a:2b:75:eb:ca:59:82:f5:d3:
         03:f1:a1:bf:fc:ca:b3:a8:1e:06:85:10:f4:c3:98:95:8c:2c:
         e9:52:c0:ef:82:0b:63:40:b7:f3:80:f1:b3:84:07:b3:23:3d:
         f7:d5:38:c9:82:33:74:15:01:e9:ab:c2:5e:b6:db:84:9b:58:
         b6:db:a4:a0:80:35:58:6e:25:f1:9e:b5:a4:e0:af:94:3e:9b:
         79:5d:bf:2f:c9:91:6b:3f:fd:97:60:23:53:f3:0a:43:68:45:
         8c:b9:e7:c4:e2:b4:97:8c:82:71:81:eb:31:82:d4:52:87:c1:
         13:4e:66:da:7c:96:ea:ee:f3:af:d8:53:b7:ea:53:05:cf:c3:
         d3:e6:cd:db:d1:b8:8d:8e:01:cd:50:81:fe:cc:97:85:4d:60:
         10:b5:d1:35:bb:e8:b7:3c:2a:19:a4:fb:f3:56:5f:14:03:86:
         15:d8:97:84:9e:56:2b:eb:00:05:de:f0:ab:91:ef:7e:3a:91:
         a0:d8:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:59 2026 by rpki-client