Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
File:                     MOCAPeumAKyakmRMlveKjohdfFA.cer (raw, json)
Hash identifier:          6sIzx6zdN+Smwnkqf1WOiIpCHjCrzstgnn7pkQey7rE=
Subject key identifier:   30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02E052
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point:   rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest:                 rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Oct 2026 13:12:38 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 135567
                          IP: 103.123.112.0/22
                          IP: 2403:a0c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188498 (0x2e052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 13:12:38 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:1d:db:fc:b4:6b:87:0d:a2:16:1f:ef:e7:
                    93:ee:8f:28:21:48:a4:a2:1f:9c:20:58:77:02:53:
                    a7:e3:59:76:47:aa:32:d8:b2:ab:c1:d6:e1:32:fd:
                    66:8d:75:40:93:d2:1d:4f:5f:1c:b5:45:ec:30:27:
                    45:3c:44:e6:73:66:a3:1c:11:aa:2a:83:86:5c:87:
                    4b:0d:69:52:a6:2e:ad:d5:a7:af:41:95:a5:c7:ba:
                    c3:2c:29:33:53:30:18:66:b9:d7:47:8f:bf:92:e7:
                    8f:67:39:ee:fe:a6:f3:d4:90:13:f1:f7:70:b4:30:
                    85:01:d4:0e:b0:70:c5:70:9e:e3:18:a5:39:b3:61:
                    4d:5a:b5:3c:11:e9:9d:6d:60:d6:66:d6:15:67:a0:
                    cb:c4:0c:e1:1f:41:98:f5:e4:51:d5:a3:f9:47:51:
                    b2:ce:ae:d6:48:ad:d6:7f:cf:35:54:50:b7:f7:59:
                    39:4a:f3:38:54:72:97:70:d8:08:ec:13:54:7c:0b:
                    fb:29:31:50:54:02:24:fd:19:ee:d8:15:19:54:d9:
                    b5:90:af:09:57:a5:e2:45:f2:d7:7e:76:da:f2:38:
                    1f:6b:ef:52:cb:7c:20:11:3c:2b:7c:0a:a7:e8:f1:
                    97:c1:49:62:18:5e:be:d2:24:55:b7:66:01:92:fa:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135567

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.112.0/22
                IPv6:
                  2403:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:47:c3:c8:54:b2:01:0a:79:c2:48:df:99:54:5e:86:2b:e9:
         dc:62:7d:70:4f:9f:87:20:f3:44:0c:7e:88:c4:17:00:32:02:
         86:0e:72:8a:cb:a6:9f:f2:88:de:d8:ec:8c:de:6c:fa:36:4f:
         be:d6:12:cd:d4:2a:ee:01:5e:5c:80:f4:7f:a2:f8:0b:9c:e7:
         d3:ee:a5:5a:11:c3:39:b6:71:be:5b:2d:7f:bb:2f:ea:13:45:
         9a:c7:cf:7e:c5:19:11:e2:c5:e0:e8:ec:2e:35:df:64:53:1f:
         f8:63:fa:8f:34:f2:b3:8d:8d:d9:5e:42:51:e4:39:73:58:e1:
         37:b0:a8:83:47:cd:21:af:93:ae:02:24:07:81:4a:58:8a:f7:
         af:a4:16:b3:b3:30:5d:f6:a6:48:b1:c7:38:78:ff:86:91:18:
         f7:bd:92:c1:66:c2:9d:17:cd:5d:7c:7c:e1:c5:23:14:62:96:
         39:fc:51:21:95:0f:14:6d:95:23:70:98:db:39:c8:3c:ad:54:
         dc:68:14:80:e2:0f:e6:cf:df:13:e3:e7:a3:92:44:8e:99:74:
         22:de:70:97:a5:9d:ec:67:fd:ac:2c:40:9c:7f:b9:25:3f:ba:
         4b:e2:9a:f1:30:15:4a:ef:09:1e:a7:d6:1e:a5:a8:be:76:c2:
         76:cc:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:06 2026 by rpki-client