Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.cer (raw, json)
Hash identifier:          BmAi0Rp3H+geK7iocSDlI5/DkEfcOYHo/U0qE9V2oMw=
Subject key identifier:   62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029A13
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:47:04 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 135063
                          IP: 103.208.24.0/22
                          IP: 116.206.124.0/22
                          IP: 2404:3a80::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170515 (0x29a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:47:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:dc:a5:8e:cd:67:36:88:3f:2e:de:59:b7:
                    c6:d5:d7:30:aa:2a:c0:3b:1a:b3:3c:e7:3d:5b:9c:
                    ea:07:86:ba:5d:5f:98:dc:9f:b4:76:cb:6b:3a:f4:
                    fc:95:9c:d6:38:54:f2:4c:1a:97:73:fd:11:e3:91:
                    98:40:3d:3d:8d:cc:a6:bd:26:31:6e:77:f4:ef:86:
                    64:d5:c8:60:8e:81:66:09:4a:ba:88:91:12:fe:da:
                    18:95:83:b8:7c:d2:16:53:b9:30:41:a1:06:df:d1:
                    b3:db:ed:67:4d:7c:97:40:80:5e:55:a7:07:27:73:
                    79:f5:13:23:59:66:09:1d:45:be:fe:55:f5:f7:95:
                    c3:f7:f2:34:88:62:fe:6d:56:22:97:85:92:e1:b7:
                    94:d6:85:1b:60:9c:41:3f:c2:72:34:e2:0d:52:02:
                    37:81:ad:ea:69:46:5d:03:12:a4:f6:58:b1:c4:50:
                    d8:1e:bf:ff:38:79:27:5f:04:fa:32:8b:a8:f4:67:
                    7c:88:ac:1b:e5:e3:ef:a0:74:03:cb:6f:93:b3:2b:
                    d2:84:90:1c:20:2f:4a:e3:4d:b1:1d:f8:c0:66:18:
                    f1:8c:6b:5e:cd:fb:8d:9e:fe:6c:2b:a6:70:89:08:
                    3c:94:85:68:bd:69:f9:ae:df:ba:0e:4c:60:78:10:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135063

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.24.0/22
                  116.206.124.0/22
                IPv6:
                  2404:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:62:6b:e1:ca:64:b8:c3:e4:58:ec:85:c7:78:4e:71:ff:2f:
         b0:f3:ee:4f:c2:f9:f0:86:ec:9f:3c:e1:c5:2f:89:15:b0:0f:
         bc:0b:15:60:1b:42:8c:26:60:c0:47:ae:e2:69:f2:fd:0f:05:
         86:db:53:5e:3f:22:56:29:57:0d:8e:80:92:a2:01:fc:d7:e3:
         24:4a:ab:c8:da:d9:5b:78:a0:41:7c:1b:c8:57:b1:85:a1:76:
         e1:aa:86:70:ae:ef:9b:52:d6:0d:0e:a5:2f:82:be:21:e7:b4:
         9b:6d:fe:84:62:db:36:1a:64:da:4c:7c:aa:cd:2e:e4:d8:15:
         02:98:c8:7c:40:42:74:54:83:39:9b:33:f3:a7:1d:6b:78:08:
         85:68:c4:be:6d:c8:85:fb:e0:32:2d:3f:f1:c8:cb:06:51:66:
         a1:28:4b:b6:f5:0b:0f:97:01:6d:22:f0:4e:54:e4:42:c8:e5:
         c9:2b:7d:a6:20:ae:8d:c1:b0:aa:18:ab:8c:d3:f5:35:78:b6:
         80:10:6c:ce:32:3d:ed:f6:6c:a9:3d:d4:30:63:db:30:c3:00:
         e1:fd:44:2b:dc:3a:41:c5:ee:94:e0:6d:04:64:8e:a9:37:f0:
         25:8e:0e:4f:5e:8a:dc:58:39:3e:7d:e4:6d:af:5d:3e:e5:7c:
         f5:bc:db:00
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDApoTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNDcwNFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVC
MTRGQjEyOUNBRDRGNkNDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8Utyljs1nNog/Lt5Zt8bV1zCqKsA7GrM85z1bnOoHhrpdX5jcn7R2y2s69PyV
nNY4VPJMGpdz/RHjkZhAPT2NzKa9JjFud/TvhmTVyGCOgWYJSrqIkRL+2hiVg7h8
0hZTuTBBoQbf0bPb7WdNfJdAgF5Vpwcnc3n1EyNZZgkdRb7+VfX3lcP38jSIYv5t
ViKXhZLht5TWhRtgnEE/wnI04g1SAjeBreppRl0DEqT2WLHEUNgev/84eSdfBPoy
i6j0Z3yIrBvl4++gdAPLb5OzK9KEkBwgL0rjTbEd+MBmGPGMa17N+42e/mwrpnCJ
CDyUhWi9afmu37oOTGB4EDktAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUYoQgfQ0n
oui/TS6xT7EpytT2zD8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyNzVFLzRERjdEQjA0OTExODExRTk5NDc5M0M0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0Mjc1RS80REY3REIwNDkxMTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEw
bm91aV9UUzZ4VDdFcHl0VDJ6RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg+XMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ9AYAwQCdM58
MA0EAgACMAcDBQAkBDqAMA0GCSqGSIb3DQEBCwUAA4IBAQAQYmvhymS4w+RY7IXH
eE5x/y+w8+5PwvnwhuyfPOHFL4kVsA+8CxVgG0KMJmDAR67iafL9DwWG21NePyJW
KVcNjoCSogH81+MkSqvI2tlbeKBBfBvIV7GFoXbhqoZwru+bUtYNDqUvgr4h57Sb
bf6EYts2GmTaTHyqzS7k2BUCmMh8QEJ0VIM5mzPzpx1reAiFaMS+bciF++AyLT/x
yMsGUWahKEu29QsPlwFtIvBOVORCyOXJK32mIK6NwbCqGKuM0/U1eLaAEGzOMj3t
9mypPdQwY9swwwDh/UQr3DpBxe6U4G0EZI6pN/Aljg5PXorcWDk+feRtr10+5Xz1
vNsA
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:06 2026 by rpki-client