Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer (raw, json)
Hash identifier:          tEx87h8Ui8jCd9poAae2lMoPT84tKOKf9I+wS2bbuZk=
Subject key identifier:   63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AEDF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 25 Apr 2026 00:16:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 149644
                          IP: 103.183.116.0/23
                          IP: 2400:62a0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175839 (0x2aedf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 25 00:16:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:ba:32:15:7c:19:ce:0e:10:2d:19:57:52:
                    cf:ed:5a:14:42:d1:05:f4:53:ca:db:1d:fd:6f:32:
                    9e:87:06:2f:de:37:8e:6d:3f:80:7e:39:a4:55:0d:
                    48:2c:75:02:49:28:5c:9d:22:9f:53:3b:01:64:5a:
                    e9:3b:cc:ca:c5:2a:b7:f9:b8:ac:33:36:fd:23:73:
                    04:ad:e1:e2:08:67:34:97:2c:99:08:fb:99:ef:48:
                    44:62:9e:52:22:41:d6:5c:83:3b:cd:6e:44:2e:9a:
                    db:a2:f3:36:b6:d4:09:43:8c:74:59:c6:b8:10:a9:
                    26:88:d8:7a:a4:a0:59:62:5f:4c:3d:c7:89:6f:c0:
                    d8:ac:7d:3a:8e:16:39:55:99:75:ff:e5:da:4d:7a:
                    f6:ca:52:73:6a:84:10:a0:b6:ab:67:fe:ee:4e:53:
                    cf:f7:69:9d:f6:59:ab:a7:d6:b6:25:59:3a:b1:a7:
                    94:45:b3:13:d5:cc:56:c1:81:eb:d0:13:d4:c4:c5:
                    44:90:87:ce:05:5e:58:b5:5e:3c:74:0b:e3:d1:c5:
                    03:da:3d:10:a3:8b:bd:f5:ff:a5:36:23:86:b6:be:
                    14:9d:f1:70:04:f4:9c:fa:c8:51:68:53:66:07:4f:
                    ea:fc:7d:ae:d4:55:e9:90:b3:ff:da:de:dc:81:5a:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149644

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.116.0/23
                IPv6:
                  2400:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:fd:e7:d3:6a:4b:23:79:15:8a:6d:25:64:d8:12:55:aa:b9:
         88:57:6a:2b:89:26:5b:a3:47:d1:54:e3:70:4b:55:cf:a4:a8:
         40:9b:b1:b6:b6:cf:69:0d:11:4e:cd:0d:ce:6f:5a:f0:fc:ff:
         2c:df:1b:26:c2:31:3a:35:93:cf:da:d3:81:ca:cc:a2:95:df:
         87:ac:fd:bf:44:d2:3f:ce:22:7f:4a:e4:df:42:2c:16:33:c4:
         1e:d6:05:21:75:93:28:a7:fa:d4:13:61:56:8e:08:af:87:f9:
         f4:a3:a0:11:85:6e:d6:57:e3:08:fd:b2:58:57:e0:06:12:b7:
         ed:f1:c7:15:d7:48:86:a5:9a:9c:8c:d4:c1:91:41:37:8d:c1:
         a5:92:d9:72:8a:6b:b1:54:94:2f:77:0f:ac:25:02:55:36:c2:
         55:e3:14:15:eb:52:cb:a9:bf:90:b0:82:37:3f:91:89:7c:15:
         d1:f4:1d:21:e7:6f:c5:0b:3a:c8:59:af:95:b2:bc:db:95:7e:
         7b:a6:7e:df:ab:a0:15:81:94:cd:60:8c:06:19:f0:e1:df:ae:
         2f:41:ee:4f:0b:4c:16:d7:c4:ad:d3:f7:37:89:d1:b4:10:85:
         5b:4a:17:91:a2:32:fe:b8:1a:7b:94:fe:a8:d4:53:ca:b0:50:
         03:89:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:02 2026 by rpki-client