Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
File:                     YfPRqhn0nmyLi94rN7WO-1SQRQA.cer (raw, json)
Hash identifier:          PMvgD1geonR9jBSpnctqgGVX3pyl7llQ2zCHWI64ZNU=
Subject key identifier:   61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       71CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Sep 2026 01:34:58 +0000
Certificate not after:    Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources:    IP: 2402:4ee0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 20:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29134 (0x71ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Sep 15 01:34:58 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:ca:8b:3a:ee:bf:32:a2:77:72:1f:dc:29:
                    5c:16:26:34:eb:52:c9:47:07:b7:80:ba:c0:7d:65:
                    4b:ed:0d:fc:c2:5d:5c:cb:a5:55:78:6f:f1:3d:58:
                    fa:6b:25:21:69:03:dc:45:39:b3:1c:82:5f:fb:8f:
                    1a:ff:23:7f:6d:7a:a1:33:fb:45:e8:5e:51:b7:7e:
                    fc:8a:a6:66:13:b0:d8:35:da:b3:ae:ef:15:43:54:
                    88:42:6a:f3:37:90:01:8c:a8:8c:b0:f8:f2:f5:fe:
                    ea:d9:28:94:8d:01:0a:56:4b:f7:69:24:ed:0d:fd:
                    c8:2a:bd:df:7c:74:9a:9a:e0:9f:2f:2f:ea:c6:d6:
                    0a:9e:5b:00:6b:92:db:b1:fe:e7:bd:82:d6:56:1c:
                    11:a8:87:f1:a8:d0:b2:e7:e7:97:84:89:27:64:fb:
                    29:b4:d4:5e:8e:1a:74:94:25:49:44:80:0f:9f:0a:
                    41:41:fc:46:bf:8b:17:5b:da:e5:61:25:17:2e:f5:
                    7c:38:f0:a4:81:73:d5:c0:5a:bf:0d:3b:03:7d:83:
                    ff:7a:65:45:0f:08:b7:26:4f:a3:9c:a8:8c:e6:d9:
                    90:0f:a3:50:49:45:0f:f8:56:cf:8f:f2:8d:75:94:
                    41:4c:0b:5c:73:ff:8d:22:8c:ce:ea:d6:23:92:75:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:bc:bd:95:f7:98:81:50:d9:6c:47:08:7b:63:ed:94:8a:
         11:63:b8:96:c2:f6:12:f6:fd:c3:5b:2d:38:6f:7a:9c:49:c3:
         9e:a3:ae:cc:cf:99:cf:59:8f:91:9b:55:e9:19:c5:aa:d4:18:
         41:6b:dd:06:84:e8:2e:d2:ed:64:9d:9b:5c:9d:af:28:3a:d0:
         a4:77:6a:fb:0d:88:8d:1c:49:f7:ff:2f:6e:6f:a2:a4:eb:8e:
         ce:8b:72:33:f6:a5:4f:a5:9c:0b:81:36:49:57:5e:a4:5f:7f:
         1d:84:32:35:02:e1:20:1b:68:58:62:5a:5b:d0:c6:e0:8c:c7:
         c3:94:64:2b:64:09:32:62:38:4e:56:c4:17:fd:9b:4b:12:0c:
         72:29:20:d2:5b:cf:74:86:31:0f:e1:54:4e:7d:63:57:5f:03:
         e0:91:a5:c1:1c:21:0c:6b:ae:bb:a0:30:2f:60:85:a1:80:00:
         d7:eb:ec:fd:85:99:8b:54:e3:a9:72:80:d5:25:eb:fd:ce:f3:
         09:b2:63:8e:8c:9d:84:38:b2:aa:ad:8d:9a:ed:c8:2f:2e:2f:
         c7:25:c1:f5:ef:bf:37:28:c2:67:3e:9f:93:c1:8b:01:72:a3:
         3a:d8:2c:41:e1:3d:60:4b:ae:aa:3f:4f:f4:d3:f6:e2:05:74:
         a8:f9:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:10:03 2026 by rpki-client