Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.cer (raw, json)
Hash identifier:          uPCxIzp5dcjJxRSPhh4ok855QzlrDNfxv1N4I0pSvO4=
Subject key identifier:   60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C3FA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 09 Jul 2026 02:57:23 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 139076
                          IP: 103.139.110.0/23
                          IP: 2001:df0:7480::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181242 (0x2c3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  9 02:57:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:99:77:6c:f6:87:ed:ef:59:93:0f:da:2f:
                    6b:6c:7a:84:2c:d0:07:e0:4d:24:b7:18:69:35:9b:
                    96:ff:97:ba:e0:59:c4:2d:34:7f:7a:ce:34:3b:f3:
                    2d:da:ff:ff:4f:30:7b:73:12:b2:7c:2f:4b:5e:fc:
                    9b:c0:ca:7c:9b:66:1f:ad:38:93:5a:64:0a:ef:09:
                    94:b7:96:18:5a:09:e5:81:e8:ba:18:d0:41:dc:e9:
                    7e:a0:e2:b1:d5:e8:e4:ae:78:83:ee:6f:46:0a:44:
                    23:2d:ba:30:ca:a9:0d:77:5d:f2:b4:3b:b5:39:30:
                    58:fc:a6:e5:8e:23:d8:76:f6:ca:f3:82:2a:cd:5a:
                    c4:2b:8d:3d:58:cb:06:e0:a6:cd:b4:83:b9:11:8a:
                    e6:5c:12:40:07:c4:a9:08:ea:79:22:19:1f:23:3d:
                    f8:0d:ff:f0:d1:43:15:ad:76:bd:67:56:3d:ba:15:
                    55:fa:c6:2c:8a:ed:62:0e:3e:99:cc:eb:e1:10:d9:
                    5e:99:04:d1:b5:a4:1f:83:0f:b8:57:0a:ff:3f:20:
                    80:55:bd:35:b4:56:cc:69:76:ba:ba:16:03:7e:d8:
                    1a:05:10:4a:c2:97:73:35:82:11:c9:ce:c2:37:07:
                    d8:47:80:ee:6b:a5:c3:da:ab:b1:7e:5c:fc:47:71:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139076

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.110.0/23
                IPv6:
                  2001:df0:7480::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:3b:d7:ce:a4:89:fa:b6:b3:60:67:8c:63:e8:e7:32:26:
         30:b9:b0:8c:0c:45:97:75:56:a6:6c:e9:98:9f:79:26:59:48:
         8f:a5:b6:06:a9:97:79:ef:a1:68:52:39:2a:6a:8f:3b:b0:24:
         09:90:cf:2d:0a:e1:82:6d:39:0f:d7:6e:36:aa:13:55:5f:c9:
         ff:52:e3:34:85:10:58:fb:89:6e:c8:6b:40:85:73:53:0e:8c:
         4d:02:9b:6d:48:9f:09:c5:88:8f:97:70:a1:11:b0:af:33:d2:
         22:82:55:ce:c7:a5:35:d7:4f:41:3b:12:76:71:aa:5f:d2:d2:
         16:de:ed:52:3f:7c:e1:fd:d7:bf:c5:20:6a:5d:01:1c:fc:88:
         c9:5b:37:56:00:9c:b4:f1:e6:1d:78:72:c3:e6:f9:4f:57:57:
         d8:50:07:0b:0b:c8:e7:9a:0f:fc:35:3f:e8:28:6a:db:28:26:
         08:0c:5b:b3:8e:5f:fb:41:c0:a1:78:01:02:26:a6:6d:c4:d8:
         e0:28:3c:8f:4d:ae:b7:9d:b4:c9:76:81:79:50:48:b1:c8:95:
         b7:42:03:e8:6d:74:f4:fa:64:eb:dd:74:0b:88:a4:28:2b:b2:
         e7:a9:48:8a:10:76:51:06:47:e4:ed:f4:58:4d:23:40:5a:10:
         f2:77:46:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:27 2026 by rpki-client