Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
File:                     y3TVYT1zQs-5t_ed7wyfrYhceCI.cer (raw, json)
Hash identifier:          4RIZTGlT+1+WltGwu22k9uF0rt85bOyW6JRL0EU4DWo=
Subject key identifier:   CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C456
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 10 Jul 2026 13:30:57 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 151410
                          IP: 103.227.6.0/24
                          IP: 2001:df2:97c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181334 (0x2c456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 10 13:30:57 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:b1:84:cb:f3:e6:ca:f5:7e:a8:f5:4d:0b:
                    79:ab:ae:3e:5d:91:bc:9f:ad:25:7b:42:ba:0e:bd:
                    5b:50:d5:57:3b:62:0d:a1:c6:a0:31:52:2d:88:61:
                    e8:61:0f:38:25:5e:35:59:bd:e6:6f:65:8d:8a:6f:
                    6c:d7:98:1c:07:72:fb:b8:6e:a5:33:b9:84:ed:dc:
                    04:74:e5:d6:d5:2d:5c:ca:15:2c:4a:d4:0c:3a:d0:
                    c9:0a:b0:ae:09:a0:49:e0:0b:29:cf:95:07:46:ae:
                    b6:25:b1:03:af:5e:85:1f:e3:9c:23:d6:66:bd:b8:
                    9e:15:60:58:66:56:4c:d7:3b:e9:ae:7a:ab:74:1d:
                    b3:fe:a4:90:c9:61:ec:b3:be:21:c7:0d:27:34:d5:
                    b0:8c:0e:13:48:e2:9c:83:8d:b2:b2:95:9c:da:71:
                    ca:ea:7e:45:c0:93:81:cd:1b:79:33:2f:d8:b2:36:
                    c7:9e:83:c5:40:db:24:3b:55:ce:8b:5d:29:46:bb:
                    04:ef:94:94:16:9a:e6:79:c0:d7:e6:d5:2c:fb:7b:
                    19:69:eb:98:e5:6e:af:01:01:5e:33:8f:d8:2e:90:
                    f1:fd:63:2f:42:a2:c7:c9:8b:90:21:c3:50:d1:fd:
                    e3:ae:b1:cf:14:d1:d0:66:b8:07:c1:4d:9d:eb:e3:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151410

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.6.0/24
                IPv6:
                  2001:df2:97c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:66:8f:f8:ac:6f:ff:fa:34:8a:1a:3a:05:4a:32:f0:a6:
         ec:e5:02:02:31:36:01:7c:e7:3b:99:b1:6f:17:0c:71:69:8b:
         cd:6a:ce:71:38:b8:f1:8c:71:65:14:48:40:66:ae:da:11:ca:
         da:ec:0a:a2:c6:e3:59:56:92:00:cb:39:78:69:fd:be:6f:ab:
         73:41:33:da:3c:bd:07:3f:18:b9:58:4a:ab:8f:dc:dc:16:62:
         bf:1a:8b:2b:37:80:e6:f4:44:cd:a8:c5:3c:3f:53:ae:c9:92:
         f3:2e:1b:04:c5:37:58:77:d9:09:0b:ac:37:82:26:2f:07:95:
         3d:7d:21:5e:b9:50:a7:4e:b8:30:8d:d9:d2:3c:4e:f8:59:35:
         ee:fd:b2:f4:1c:47:34:6c:f3:69:3b:d1:fe:b1:6f:b0:b2:d5:
         18:72:56:d9:dd:41:0e:70:28:8e:5c:5f:61:c1:ed:aa:7f:c7:
         3d:15:45:ce:fb:8e:a6:e7:19:28:22:7e:83:ba:2f:18:4d:5f:
         5f:43:4b:f5:ca:fe:d8:96:55:2d:95:2a:0a:4b:dd:fa:16:02:
         de:64:1c:d3:d1:2e:e4:e8:a2:07:d6:a4:02:b9:4b:6a:b5:a8:
         d6:c2:c5:36:6b:32:2f:d4:9a:ce:90:26:e6:25:24:48:e0:11:
         08:47:ad:c9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAsRWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxMDEzMzA1N1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5
REVGMEM5RkFEODg1Qzc4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0S7GEy/PmyvV+qPVNC3mrrj5dkbyfrSV7QroOvVtQ1Vc7Yg2hxqAxUi2IYehh
DzglXjVZveZvZY2Kb2zXmBwHcvu4bqUzuYTt3AR05dbVLVzKFSxK1Aw60MkKsK4J
oEngCynPlQdGrrYlsQOvXoUf45wj1ma9uJ4VYFhmVkzXO+mueqt0HbP+pJDJYeyz
viHHDSc01bCMDhNI4pyDjbKylZzaccrqfkXAk4HNG3kzL9iyNseeg8VA2yQ7Vc6L
XSlGuwTvlJQWmuZ5wNfm1Sz7exlp65jlbq8BAV4zj9gukPH9Yy9CosfJi5Ahw1DR
/eOusc8U0dBmuAfBTZ3r40R7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUy3TVYT1z
Qs+5t/ed7wyfrYhceCIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc4NDVCLzk3MzY5QjQ2MjE3NjExRUVCNEYzQUQ2RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQx
elFzLTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk9yMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ+MGMA8EAgAC
MAkDBwAgAQ3yl8AwDQYJKoZIhvcNAQELBQADggEBABwBZo/4rG//+jSKGjoFSjLw
puzlAgIxNgF85zuZsW8XDHFpi81qznE4uPGMcWUUSEBmrtoRytrsCqLG41lWkgDL
OXhp/b5vq3NBM9o8vQc/GLlYSquP3NwWYr8aiys3gOb0RM2oxTw/U67JkvMuGwTF
N1h32QkLrDeCJi8HlT19IV65UKdOuDCN2dI8TvhZNe79svQcRzRs82k70f6xb7Cy
1RhyVtndQQ5wKI5cX2HB7ap/xz0VRc77jqbnGSgifoO6LxhNX19DS/XK/tiWVS2V
KgpL3foWAt5kHNPRLuToogfWpAK5S2q1qNbCxTZrMi/Ums6QJuYlJEjgEQhHrck=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:25 2026 by rpki-client