Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
File:                     1ybobzALJko1PClnPgdxb1RUteI.cer (raw, json)
Hash identifier:          AXCmIQothSGUhT2TZzW1rRKGQLrbdgWKfoJrd5A/k0w=
Subject key identifier:   D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BB1F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 04 Jun 2026 14:22:53 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 153996
                          IP: 2001:df5:c8c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178975 (0x2bb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  4 14:22:53 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:96:b0:44:5e:fc:3d:96:28:55:35:f8:3c:99:
                    41:88:45:ad:6e:4f:97:f6:82:d2:47:c0:43:15:0a:
                    30:83:a6:dc:e4:bb:b8:2e:64:62:b4:1e:9a:37:75:
                    c7:34:7f:57:a2:f2:88:6a:bb:6a:ee:c3:61:f8:68:
                    b5:49:23:0a:23:81:cb:3f:b6:dc:20:73:35:92:b6:
                    aa:2a:05:89:24:1e:df:7b:cd:ed:a1:ff:b7:25:6b:
                    b8:3b:53:d6:55:2f:c8:cb:e3:33:44:cb:c9:ea:b0:
                    7d:2f:a4:fc:38:ca:06:49:39:09:f5:2c:b6:bc:ec:
                    2d:52:6d:15:55:d3:44:17:90:17:be:87:d3:ba:32:
                    40:e6:c1:4f:84:df:fc:d7:8f:54:54:71:5e:6f:a9:
                    ff:3f:9a:fc:48:43:85:a2:8f:98:80:92:2a:64:1d:
                    1e:b8:94:40:a1:80:a4:50:2e:a7:03:12:a3:07:3d:
                    2d:dd:2f:17:2f:38:9e:25:11:f3:41:2f:6b:4f:5b:
                    4a:d1:00:17:b7:70:ca:1e:7d:fa:fb:5f:3a:bc:86:
                    9e:ee:a2:b9:87:db:04:e8:1f:07:16:2b:fa:c1:dc:
                    a9:78:32:82:7f:fa:2b:bb:95:30:5d:5b:bc:8d:30:
                    1a:41:d2:56:f3:0c:fe:66:1e:09:91:f3:38:a1:b4:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153996

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:60:45:87:56:91:7e:39:9d:12:b0:74:b3:5b:1f:0d:6a:
         f2:00:12:af:5d:14:7d:8c:97:89:82:65:04:56:e9:70:d9:3a:
         60:f1:af:56:c6:35:41:33:d8:27:15:ab:c0:78:7b:58:96:2a:
         49:75:3f:ee:35:27:13:d5:19:56:9e:7b:b5:02:e8:6d:9f:34:
         62:fd:f8:c9:ed:d1:57:5f:86:52:c0:0a:bf:60:25:c5:f3:87:
         e2:f1:fc:97:45:96:2b:49:9d:a7:71:92:39:00:e4:d6:be:ff:
         bc:93:4a:33:b9:4c:e3:e2:e7:c9:24:fd:73:20:42:e4:32:47:
         7d:c3:e5:92:1c:ae:6d:03:6d:1b:7f:ec:50:0d:33:c6:8f:5a:
         dc:6b:bb:9f:c7:59:0e:70:00:06:c2:ad:af:2b:b8:1c:15:0e:
         94:f5:5d:47:50:3f:4f:bd:4f:49:46:9c:43:6e:15:09:45:e8:
         a2:a2:72:82:a3:cb:37:53:2f:6f:8b:c0:6b:23:14:e0:96:77:
         52:dd:d9:15:b6:f7:58:02:71:1d:15:cf:87:f7:2b:d6:41:d5:
         0a:00:eb:f1:63:77:d8:fc:99:40:de:d5:e4:12:01:7a:fa:5c:
         aa:38:a6:d3:8c:fa:71:fa:26:5b:58:e2:dd:1f:bb:ca:f5:99:
         63:3b:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:56:00 2026 by rpki-client