Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
File:                     YbChG9lEvNqGW7mx-_fuBtVzvXE.cer (raw, json)
Hash identifier:          z/B/cNhoIOn3gvhqtE5NBYtza30dHyIjYKRY3FgKYnY=
Subject key identifier:   61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029D79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:02:20 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 63954
                          IP: 103.51.220.0/24
                          IP: 103.94.102.0/24
                          IP: 2001:df7:a100::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171385 (0x29d79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:02:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:b1:d6:cb:2d:bb:0a:d0:7a:7e:55:d2:81:
                    91:10:14:6e:97:f2:94:e3:3c:cf:73:e1:be:1b:15:
                    19:54:64:c8:58:e7:35:a1:26:c9:f3:b6:04:ef:0c:
                    1d:c9:d5:13:2c:c7:8c:63:12:2b:06:eb:a4:a8:44:
                    e0:12:6e:a0:f1:f5:4f:0a:f6:5d:b4:e6:b8:56:8e:
                    ff:d4:b5:03:1b:6c:11:6e:42:97:e8:3d:37:e8:77:
                    68:6f:a9:c8:63:06:c8:86:65:86:8b:83:43:fa:14:
                    54:26:0e:5b:c7:8e:c4:7b:f0:2e:90:46:dd:f3:64:
                    51:f8:40:16:cd:f1:bf:7c:82:f3:79:ba:6b:00:09:
                    a6:eb:f1:1b:63:88:df:bc:93:a1:65:ae:f4:59:31:
                    33:c8:fb:30:e1:7c:93:38:29:09:51:f4:bb:67:b7:
                    cb:58:e2:d0:a7:a0:cd:72:a1:f4:ea:2d:0d:36:73:
                    ed:99:ac:4e:4f:fb:ea:b4:5b:31:e5:19:7b:6a:e4:
                    0c:19:a8:d3:3f:d7:fe:b5:be:b5:4c:88:c1:0a:a1:
                    51:eb:fe:d0:de:63:fb:83:8a:3b:05:09:ae:6d:0a:
                    70:d4:2c:45:af:10:ab:df:e4:c5:ee:0e:f3:02:5e:
                    d8:e6:0d:6a:10:47:90:ff:88:6d:27:52:c8:2c:2b:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63954

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.220.0/24
                  103.94.102.0/24
                IPv6:
                  2001:df7:a100::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:0a:a0:50:43:ae:ae:ae:36:79:a3:2c:e2:d5:55:be:49:
         e1:de:76:3b:53:f7:d2:2e:2f:14:dc:06:28:78:35:25:e5:ce:
         4d:9e:18:e8:50:8b:88:ae:5e:88:bc:35:7f:88:9d:c3:1e:0b:
         d7:e7:e7:fb:ed:b8:12:71:db:ce:b8:49:76:6a:1a:14:77:86:
         cb:c0:9e:3c:0c:61:a4:fc:8d:f9:30:cb:70:16:ae:05:c7:66:
         5d:cf:31:d0:b9:33:58:78:57:f3:85:0f:98:08:53:06:2f:79:
         3f:4d:22:bf:15:e0:da:2e:06:b0:14:d1:6f:64:2e:01:42:25:
         c5:74:a2:4d:08:c9:a9:3a:72:43:a3:08:e0:d3:76:c0:af:b8:
         90:bc:95:7a:eb:b5:59:28:5e:84:ec:32:45:90:31:df:c8:a4:
         c1:bc:95:de:2c:57:5d:80:c3:a0:70:06:8d:96:7d:8b:9d:17:
         01:6e:93:a9:df:4c:c4:0c:08:d8:b2:df:63:30:f2:da:f1:e0:
         76:93:ee:9b:7a:1f:70:1c:23:48:0e:89:7a:bf:07:54:b8:45:
         06:6c:62:18:c5:df:f0:20:46:68:61:fa:cc:20:89:4a:fb:9e:
         ac:15:9f:d7:4f:60:de:3d:6a:21:64:9e:70:33:94:40:e0:4c:
         da:c7:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:01:00 2026 by rpki-client