Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
File:                     C5sr_BxrLAlndq91fTrxRUfkPnI.cer (raw, json)
Hash identifier:          cIkZDvBXvxtU8ClP72Cz+kJuR1QpOA5kKERl+t2LeCc=
Subject key identifier:   0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       79B4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 10 Apr 2026 13:51:01 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 167.179.48.0/20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31156 (0x79b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 10 13:51:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:10:02:06:84:01:11:f5:99:df:35:e8:29:
                    67:27:24:f3:a6:07:2b:30:65:d2:41:ba:76:10:9a:
                    8e:25:c6:24:b1:39:06:4f:17:1c:8e:90:3f:a8:fe:
                    39:9d:52:35:ad:ca:78:d3:bc:91:9a:60:d3:c9:29:
                    74:51:7b:d1:80:20:0c:b1:99:76:ce:41:52:1b:a9:
                    40:10:a0:f1:5c:30:c1:8b:39:5c:ec:e8:7e:79:4d:
                    34:7d:d2:67:1a:df:3b:3e:9f:25:94:eb:39:93:15:
                    b0:1c:77:3d:b1:a2:b8:0f:88:b6:2e:5f:bc:88:2f:
                    2c:67:59:77:43:d9:a2:75:b9:c4:a1:5d:53:5e:6c:
                    7a:72:20:a2:9f:91:99:54:bd:2a:85:07:88:a3:53:
                    35:d4:0c:a8:af:7e:c9:b2:51:46:f5:1e:43:08:47:
                    28:71:e0:05:b3:76:af:9a:1d:c2:6c:77:7e:d1:7e:
                    da:b4:1b:63:bc:41:74:2c:05:47:b1:03:ec:a0:57:
                    d4:2f:4a:a6:7b:2b:78:0e:32:4d:1e:eb:5c:68:44:
                    aa:6a:90:ff:8e:76:4f:3f:9f:52:af:8f:42:99:b6:
                    b3:22:fb:a4:c1:2a:57:10:ba:c6:92:19:0b:97:27:
                    85:33:2f:9e:e7:2a:6f:80:7e:50:f8:0d:5d:23:14:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:85:3d:ef:84:54:c0:0b:1e:e5:1f:79:08:5d:ac:f4:e9:1c:
         c5:c0:94:dd:42:cd:f5:66:aa:7f:9d:59:ed:66:97:53:58:a8:
         df:0e:ec:3c:8e:89:40:d5:61:48:ab:6c:39:c5:20:28:6a:73:
         1c:9d:e5:51:8c:8e:e3:b0:33:2b:57:8f:3b:44:c4:98:d6:32:
         c6:ca:95:79:d3:c1:97:2f:00:82:c7:e0:4e:05:02:7a:52:67:
         ec:c0:e1:4f:ee:94:93:06:f7:db:b3:76:a1:26:3f:72:09:29:
         82:bf:b5:6b:d9:f0:da:ff:e7:da:ae:43:63:0e:65:1e:be:61:
         bd:30:a8:20:54:a6:ed:9a:b4:39:4e:f7:61:f9:12:a8:b0:ad:
         9d:b2:9a:a4:67:bc:6e:54:a6:43:d9:69:37:95:13:03:0c:16:
         79:36:9a:02:c9:0c:d7:c8:b8:8b:53:f1:bb:99:55:b9:dc:a1:
         0a:b5:18:f2:bb:ef:b1:99:86:52:ca:6b:67:27:6e:d0:2d:de:
         9c:e0:aa:db:cd:35:47:f2:99:9d:23:98:b0:b3:8d:34:b8:3c:
         22:cb:ce:e6:28:2d:e4:08:d4:0b:09:6f:62:c1:9e:3e:11:24:
         cc:a2:37:77:aa:18:36:43:af:79:03:a5:a5:2b:40:aa:78:47:
         b8:e8:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:28 2026 by rpki-client