Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
File:                     4A98xO20ZNoqTvnfvu5imVNRVeo.cer (raw, json)
Hash identifier:          RGvUUptAZk5JSf+ywwD1oz2wVZyufWng3B+pVS8zWPY=
Subject key identifier:   E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7C50
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 10:17:43 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.186.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31824 (0x7c50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  3 10:17:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:78:ff:50:ef:62:d7:a2:ba:60:d3:7c:6d:
                    a8:28:c3:eb:0b:1d:2d:ea:ab:6a:85:1c:ed:9e:29:
                    33:48:2a:39:02:54:6f:ad:76:61:dc:af:dc:8c:78:
                    a0:f8:5d:95:aa:c8:00:52:52:61:b4:75:78:ad:c6:
                    24:d1:67:87:3c:8d:e0:64:51:49:8c:a3:47:8d:fc:
                    34:52:ae:b1:1e:db:0f:4f:f5:d1:0e:be:7e:f0:3a:
                    50:41:c1:f9:d6:72:8e:4c:9f:54:eb:b3:b0:c8:5d:
                    24:98:9a:99:8e:cf:14:44:19:0b:55:e3:ed:7c:a8:
                    e2:58:d0:ed:44:4f:d1:05:a3:aa:0e:b5:0b:62:3e:
                    cd:86:22:89:51:df:64:44:9c:2c:cc:dd:8f:a3:a0:
                    00:c4:dd:ff:e1:d6:ff:6d:5e:3b:cc:45:f7:61:ee:
                    7f:0f:ca:7e:8d:db:bc:d1:76:3e:e2:89:9f:32:8b:
                    2a:51:ec:d5:2a:e1:1a:95:ed:cb:fc:a5:e4:c5:01:
                    c9:ff:ee:a5:8e:1c:ee:de:2e:75:30:13:26:f0:65:
                    5a:98:ae:d9:34:77:8a:1e:fc:c3:31:86:9d:18:66:
                    81:8c:12:a3:10:b3:11:01:51:2a:90:05:7e:32:61:
                    f4:fe:b1:b2:61:67:d6:c2:82:7c:6d:0a:5c:2f:c9:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:db:58:bd:86:e8:c6:69:9d:ab:26:ec:93:15:94:92:55:
         78:50:96:06:64:84:bf:4c:a1:b9:44:a1:d8:68:55:38:64:19:
         e7:0e:e9:19:ef:56:09:dc:70:a3:52:12:5f:0a:dc:5a:dc:02:
         10:e3:10:ef:73:09:56:4f:a9:98:0c:25:b2:d5:13:45:da:5b:
         f8:7a:38:fc:a4:06:7d:29:d9:3f:7d:48:6b:02:c3:38:4d:97:
         ec:38:d1:74:ad:c3:dd:62:6a:68:c6:12:d9:86:5c:8b:43:4f:
         75:75:b5:23:a2:04:fc:b4:fb:23:b6:d1:d0:24:87:23:d0:69:
         e7:a8:00:76:4f:ad:30:8b:9b:15:8c:e5:e0:1e:c1:80:21:d6:
         53:2e:55:cc:ae:d4:59:d8:23:1f:e2:0c:17:a6:cf:08:1b:74:
         19:89:05:3c:39:b6:19:fd:e0:33:9d:10:a6:4c:13:0b:6b:ea:
         79:e7:61:8d:51:1d:80:49:dc:9d:2b:a2:3c:d9:00:30:6b:e1:
         6c:0c:c7:c5:ed:2b:9c:d0:4d:f8:f3:4d:79:ca:95:45:b7:65:
         d6:60:28:de:68:0c:d6:17:96:5c:ca:02:73:1c:46:8e:54:84:
         47:6c:48:ec:3f:1e:2d:55:b8:88:42:75:1a:80:58:2e:64:e2:
         ce:2b:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:40 2026 by rpki-client