Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
File:                     8eUBY6xQamLM-1qK9WURw48VBBQ.cer (raw, json)
Hash identifier:          oe1GsJbja0KDwvhSOkJzKxpHsDM3Z5DcsMCYj0GLreo=
Subject key identifier:   F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       74A1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:39:33 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.12.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29857 (0x74a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:39:33 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:47:43:f9:13:ca:b6:26:f2:11:62:cb:e1:de:
                    2e:a4:9a:93:cb:73:e5:27:0f:85:5e:f4:fc:50:ef:
                    50:78:91:99:22:26:10:0c:76:05:4d:1f:39:80:c1:
                    4e:f9:53:5f:43:fc:a3:0b:d4:d1:1a:36:aa:76:53:
                    41:52:5e:1a:be:6c:58:a1:fa:e2:36:a0:b9:d4:e8:
                    97:40:50:e3:47:16:15:78:1e:a4:89:06:ec:56:6f:
                    59:61:bb:38:9e:1f:84:69:d0:a5:0a:9e:f2:44:aa:
                    2f:4a:60:cf:2b:03:e2:1e:bb:04:6b:f7:45:53:8d:
                    87:36:88:93:26:d2:7e:21:19:1b:25:27:ec:6b:bf:
                    21:93:47:7c:5a:e2:ff:6c:13:7e:57:20:bd:c6:96:
                    89:10:d3:f5:5e:28:2a:1b:7f:a1:19:87:69:ff:29:
                    59:ac:f4:ae:d2:0b:fc:68:cf:fe:b9:ee:3d:37:8f:
                    5f:5f:7b:a6:c0:45:29:f6:4f:24:d5:ff:7d:92:eb:
                    7f:96:ae:2d:d9:83:e2:5b:47:c7:f9:17:cd:df:b4:
                    fb:67:39:ae:42:34:e5:d0:de:09:74:08:fd:65:b4:
                    6b:ef:ff:ca:10:ab:09:8f:ec:e9:7c:36:0b:09:13:
                    52:19:4c:d4:ed:23:ab:b0:0b:ae:bb:e5:5b:a3:7a:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:8f:4e:51:33:23:3c:a4:43:ea:28:52:b0:c9:f0:51:11:
         fc:f0:2c:31:0d:3f:4c:2e:c9:23:a1:42:a3:f3:9a:32:7d:c8:
         13:74:d5:1b:dd:a8:41:c7:dd:71:0e:5c:2b:ac:f7:82:42:ea:
         0f:1b:57:fd:87:81:9d:2b:79:20:f5:db:d8:50:7d:9d:53:0e:
         82:d8:fa:da:dc:27:82:da:2a:5f:a8:05:b7:a2:75:56:ff:86:
         75:d6:f1:5f:5f:39:00:69:0f:de:e2:bf:c2:dc:fb:ca:af:4b:
         0a:b1:a1:d5:2b:a7:a8:79:43:4d:83:7f:19:b7:f5:29:be:6f:
         5f:b7:fd:e0:28:ca:2c:28:3a:a3:09:86:a5:f6:45:4f:f6:cd:
         2b:94:52:3b:52:bd:d8:1a:81:72:ea:3f:8f:da:0f:20:89:d2:
         a4:7a:43:9e:41:af:c8:4a:2a:d5:52:6b:77:04:fa:ea:f8:4f:
         d0:ad:c4:68:a0:e9:4f:1c:da:8b:3a:9a:5e:87:af:94:d1:ac:
         6b:5d:95:6a:22:98:ae:ce:30:af:5a:95:78:56:af:42:ac:8c:
         8e:89:ef:dc:2a:9b:40:ef:42:f6:42:e1:a5:ca:09:f6:38:72:
         b2:5d:ea:28:81:41:ed:75:d4:71:21:73:9d:36:c0:29:e8:36:
         cf:74:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:28 2026 by rpki-client