Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
File:                     44pe3hloyTdeUVUfrpiIigu1RJA.cer (raw, json)
Hash identifier:          P6beqyH7eTeorQR3DWK1LAkfSCbyMyxX4OHL6dmYZ8w=
Subject key identifier:   E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       76CA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:58:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 161.248.53.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30410 (0x76ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:58:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:df:87:bf:f3:fa:ec:2d:30:46:66:b2:bf:
                    01:52:cc:07:42:0e:bf:f1:57:43:53:9f:7e:cf:08:
                    25:42:87:96:32:05:c0:89:1e:79:8e:cb:19:97:a3:
                    83:e5:3a:13:c8:c6:0c:92:ca:72:8b:2a:b6:28:11:
                    94:e1:30:2c:7c:87:8f:37:05:b3:f4:88:f6:0d:bb:
                    36:ed:b9:bf:d1:ad:07:70:98:14:ac:d3:44:3a:6e:
                    4d:4a:d1:03:04:9c:29:09:2f:8c:77:df:b1:88:b5:
                    8d:fb:ba:4b:a6:06:c1:b7:4b:2d:0e:f3:51:81:74:
                    28:1b:dc:e8:09:6d:8c:b7:2f:59:a3:d2:69:17:a8:
                    6b:f0:db:4c:9c:d4:b6:5b:5b:fa:03:c3:63:a8:2a:
                    4d:23:d1:76:a5:55:3c:6f:27:7c:81:97:08:af:59:
                    91:90:4d:08:15:53:55:61:58:bc:dd:18:e2:87:0f:
                    44:c5:fc:af:0e:f0:cb:c3:e7:05:69:17:53:f3:4b:
                    9c:a5:23:1d:e6:e4:68:98:93:15:54:d3:bf:ab:47:
                    a7:5e:ec:46:2d:14:e4:0c:63:ae:da:bc:0f:a3:77:
                    54:62:d3:3e:56:d9:12:42:90:52:0d:16:64:9b:98:
                    9e:fe:3a:75:f5:a0:87:7d:c9:27:43:4a:e0:10:c6:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d1:30:3f:34:5f:9a:89:09:cc:db:91:3f:f1:a6:2a:e8:02:
         1a:4c:c6:cc:b0:87:b6:00:6a:47:b3:5d:f5:a6:e1:64:a9:d3:
         e1:d1:82:77:ea:57:e9:74:73:b7:1a:64:69:93:96:49:75:7b:
         c6:99:6f:9c:5b:0f:61:da:11:4e:08:dd:f4:3b:81:b4:f5:d4:
         f2:68:f1:a6:4d:c2:74:41:25:33:e7:c8:79:bd:ad:53:af:e8:
         db:94:c1:1a:1f:0c:e1:3e:f5:51:7c:0d:06:7d:88:26:b6:c1:
         3a:89:5a:d2:21:92:f9:d9:95:28:bb:aa:24:12:a3:23:f8:6e:
         3c:19:81:56:4c:a6:51:c5:f6:8e:f1:b5:9a:1c:12:2c:d8:fa:
         51:98:27:f8:8c:4b:f7:ee:b4:ec:d6:20:94:32:81:ee:26:47:
         cc:82:c5:fb:3b:90:c4:81:53:77:44:fd:f1:ed:df:32:53:13:
         e4:b6:7a:99:ed:29:2f:c6:cb:f7:3e:3e:bd:75:f1:a7:6c:e9:
         db:21:0d:55:e1:86:65:98:b9:05:6a:b6:2c:55:c3:34:9a:d5:
         d5:42:37:f1:a6:98:0b:33:3a:03:c5:01:27:ac:26:08:1f:bd:
         49:1c:55:da:fb:ad:91:71:d8:3e:f8:c7:c7:94:60:30:39:0e:
         43:89:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:25 2026 by rpki-client