Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
File:                     yddu42nMHPDmKcUQpLr0ZeFfteE.cer (raw, json)
Hash identifier:          wyxr85bbw970MVk9VrgK6Zyrjsj00c9ldld2VEkW3uM=
Subject key identifier:   C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029B8B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:53:19 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 132008
                          IP: 103.178.72.0/23
                          IP: 2001:df0:36c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170891 (0x29b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:53:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:6f:f5:0c:2d:9e:e0:78:84:61:d9:ab:01:
                    fb:ef:5b:8e:97:5d:17:14:46:80:1a:4c:7f:98:33:
                    2e:d8:51:69:c5:b3:aa:93:b6:b4:b8:e3:77:9c:7e:
                    b0:41:c5:2a:66:87:94:a5:20:d0:ae:52:4d:54:fe:
                    74:15:2b:cb:1f:1c:59:59:07:17:30:aa:9b:0c:5d:
                    64:1b:36:cb:89:80:e6:01:57:c9:54:10:65:b7:0b:
                    fa:eb:7d:c1:78:81:37:4f:60:7b:c7:4e:09:d7:f5:
                    3c:58:6b:13:e6:06:19:f6:48:0a:93:bf:80:07:4d:
                    e7:28:75:a5:e1:f0:fa:02:cf:97:96:c2:b5:89:89:
                    9f:c7:8d:b5:f8:dd:9f:84:b8:f5:31:67:49:ce:93:
                    78:01:f9:a4:34:b3:25:81:1d:fe:97:0d:6e:62:fc:
                    c6:29:96:78:78:e0:ee:20:96:a7:54:10:5f:99:47:
                    70:5e:6b:08:46:61:f8:54:17:db:86:be:a7:bf:2e:
                    b0:89:76:b2:f6:1c:6e:ab:af:2a:a4:f8:f0:43:ea:
                    48:6f:57:72:c0:c5:37:54:4a:f2:94:22:30:25:3f:
                    23:42:87:b2:53:20:1f:0f:4e:cf:a2:1f:10:9a:bc:
                    48:d9:64:8c:95:fb:cd:00:79:a5:83:b2:71:b4:62:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132008

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.72.0/23
                IPv6:
                  2001:df0:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:55:ac:ab:20:63:98:20:56:ee:6e:c0:3f:ac:74:fa:6f:f4:
         91:b2:eb:8f:15:23:4f:ad:57:b7:4f:99:c0:00:0a:10:32:b4:
         e6:67:99:50:b0:89:a0:00:61:3c:b1:89:da:c8:1a:46:0b:37:
         44:c7:64:95:32:ae:c1:2d:1b:53:e8:59:9b:d9:4a:1e:69:2b:
         44:a1:75:18:60:e2:1c:b2:87:9c:d4:84:31:d6:9a:5f:a1:34:
         0f:ae:8c:eb:ed:aa:a0:ed:b4:2c:37:43:25:07:cf:73:aa:38:
         5f:45:47:98:50:0d:30:63:ed:f4:e1:23:27:a3:91:f9:22:b5:
         9c:84:6a:0f:e9:ca:72:f0:c0:bd:66:e1:6b:0b:a0:47:2a:bd:
         72:11:2b:93:f2:7e:3e:f1:f3:0f:e6:1b:b8:c4:c9:07:1a:57:
         32:55:6c:db:cf:f7:41:60:4d:98:76:61:b6:e4:78:ce:d9:9c:
         65:55:5d:af:e1:f7:c8:a3:41:2e:e5:9d:30:6e:76:5a:44:9a:
         08:e4:bb:f2:5f:59:1b:f5:b0:7c:df:1c:27:06:be:c7:55:82:
         b0:36:60:94:fa:70:26:1c:f3:c6:da:86:57:24:6f:e6:cd:39:
         29:b4:93:01:f7:a4:d5:9c:57:49:92:ed:f1:c0:d1:c2:73:95:
         be:d0:4c:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:44 2026 by rpki-client