Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer
File:                     yU_6eqS897yayfDTywnSlOVxFiM.cer (raw, json)
Hash identifier:          w4IUClnD/uHnJJlHaOyqPNyPdYF08YuoV4yCu4uIkFc=
Subject key identifier:   C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       024C95
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Jun 2025 12:17:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 103.139.124.0/23
                          IP: 2404:e2c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150677 (0x24c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  5 12:17:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A915730C, serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:dc:31:49:a4:68:2e:7c:e2:23:96:80:cc:
                    68:26:ee:37:db:67:75:04:b5:29:af:f9:e5:9c:86:
                    28:5f:98:5d:29:5e:7d:42:17:87:9f:55:c2:f3:01:
                    9d:69:01:8a:bf:ee:30:13:05:cc:b3:60:ba:60:9e:
                    98:43:e2:08:1c:71:ee:82:cf:4c:35:94:72:af:04:
                    0b:38:b4:43:5b:7c:06:72:7f:18:f5:e3:24:d3:3f:
                    21:70:56:6d:3c:77:38:93:6f:3c:02:96:57:55:89:
                    5f:61:c2:09:ae:e6:b3:88:e7:09:9a:d8:e0:8c:74:
                    a6:e3:ba:dc:89:0d:b5:11:5c:e2:7a:c0:ae:46:53:
                    e8:56:17:3a:f0:f5:03:c2:66:06:40:ac:06:d1:39:
                    87:a3:b7:e3:59:cd:14:21:02:df:54:be:53:4a:9c:
                    94:2c:a2:77:0f:c3:f9:89:d9:8a:30:fb:f9:37:15:
                    9a:25:20:21:e8:56:03:79:83:32:ac:8c:ed:68:26:
                    09:c0:81:a5:96:e9:d2:8a:eb:ca:c9:9e:69:4f:1a:
                    3c:bc:bd:2c:a7:04:c1:27:bc:e6:39:2e:79:e7:75:
                    83:18:b4:49:20:b5:bd:a1:6a:4f:6e:95:f0:af:7d:
                    f0:81:6e:34:9d:6f:18:2c:39:97:04:46:cd:d5:3f:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.124.0/23
                IPv6:
                  2404:e2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:32:c8:36:f8:f8:d3:b6:1f:ed:67:24:70:29:e7:d2:52:fc:
         24:de:e9:42:74:67:bf:65:25:27:c0:54:ce:a7:c2:8b:e3:5c:
         33:60:09:e7:df:61:51:31:d6:b8:f2:66:43:be:7c:ba:de:3a:
         9c:42:77:40:55:b7:8b:49:03:b1:3a:75:c2:a5:be:5c:b0:c8:
         13:58:83:70:66:64:cb:21:be:2c:9e:85:17:05:9c:49:b9:8c:
         40:f3:cf:35:4f:60:1f:5c:c6:44:a8:1b:2d:f0:68:de:39:dd:
         fc:98:13:16:19:71:a5:50:b8:94:39:b1:61:0e:d5:44:2a:74:
         45:2f:6b:cf:75:87:f2:1a:41:af:ab:1a:37:27:5d:e2:88:69:
         81:60:f2:c9:69:87:39:aa:14:b1:99:30:9f:c7:85:08:6b:d0:
         04:8c:2a:fb:da:fd:ac:fd:bb:43:86:27:1a:b6:24:83:bd:81:
         22:73:08:fe:9a:c0:39:27:49:c4:64:81:8a:2c:9c:8a:bb:cf:
         6a:f2:7e:62:06:a9:d2:c8:b4:92:7b:41:17:66:54:21:7b:79:
         48:c2:8c:68:6e:c3:b5:4b:37:ac:69:d6:d9:f8:c2:80:17:6b:
         51:f9:d6:02:52:3b:dd:96:8e:e9:eb:bd:7e:35:60:da:4b:26:
         65:27:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:57:11 2025 by rpki-client