Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
File:                     DsmozWa374HQeaCEKyY5Zf50-NA.cer (raw, json)
Hash identifier:          SYPsU1BVzI2jkQh752DUnxdr6VW7i+6E03RtpTl0pz4=
Subject key identifier:   0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       80C8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 16 Aug 2026 12:59:44 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 167.30.0.0/16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32968 (0x80c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 16 12:59:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:d5:b8:be:f9:0d:be:2f:14:3a:ef:c0:56:
                    12:8c:11:cf:c6:fb:4c:9e:47:66:22:ff:56:24:ef:
                    a6:d1:57:b2:66:00:76:5f:61:8a:29:0d:72:64:47:
                    85:ca:54:61:0f:94:37:ec:66:c0:54:31:e8:cc:fe:
                    58:43:76:25:9a:a4:72:16:9c:5b:a3:19:1e:8b:d8:
                    1a:6a:8e:af:37:06:cb:6f:8c:b6:cc:b8:03:7f:0d:
                    34:60:9e:b7:f7:4b:3c:f7:09:96:63:75:3d:df:da:
                    59:de:9a:1a:d4:3b:5c:6a:9a:e8:b2:f9:5a:3b:3a:
                    2a:89:99:d4:dc:81:1c:5b:10:9c:15:ac:e0:b6:e2:
                    85:ee:17:fe:fa:f1:a7:1f:47:3d:13:7b:43:c5:39:
                    f4:7e:78:68:4c:5a:e9:b0:69:63:0b:5a:3b:dd:36:
                    65:77:4c:c7:01:ed:2c:01:aa:dc:ef:26:ad:eb:0d:
                    bb:3b:6b:0e:9c:db:ca:1d:08:ce:d8:99:83:04:d3:
                    fe:84:88:75:2e:d2:c7:be:1d:b5:fa:31:58:78:8f:
                    9a:7b:e8:15:e9:0f:1f:f3:f1:40:56:95:81:bf:82:
                    22:65:25:de:0e:29:d0:2d:25:7a:a4:10:65:30:cf:
                    62:34:cc:78:61:ad:fa:6b:e9:20:10:10:df:00:fa:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:88:f1:a3:ba:88:cb:62:d9:ab:ac:cd:ed:fa:37:9f:ed:
         e8:f3:7a:74:4e:1c:2f:d5:f1:68:f0:82:02:b8:db:b8:e5:aa:
         f7:a9:3c:03:bf:42:8d:89:83:10:db:6d:76:ee:ea:ae:dd:51:
         d5:b9:42:cf:29:93:75:90:9f:36:08:8b:82:35:77:03:58:d6:
         0e:8d:38:b4:7f:94:62:d1:f0:f8:87:63:00:40:59:77:aa:8b:
         a4:25:25:fa:6c:92:31:48:4e:a8:38:27:6c:94:3a:aa:71:18:
         27:6d:ec:78:c7:b3:0d:25:34:2b:eb:6c:35:b2:1c:7d:3e:c6:
         01:e1:3c:c7:e1:18:99:6f:02:49:02:69:7a:90:b8:8c:0a:31:
         19:06:ca:05:ec:5e:8d:84:83:b7:11:2f:d4:5f:cb:a2:1a:bb:
         75:bd:db:98:28:df:60:76:17:1c:1d:c1:26:35:23:77:13:4a:
         8b:7a:fd:5c:69:0d:00:00:42:6c:95:12:c8:47:52:b8:4e:3b:
         ad:38:6b:28:f9:aa:85:a6:1e:a1:db:f7:c8:17:ef:32:cb:55:
         52:e0:a3:5f:d4:f6:a0:0c:4a:1a:0a:bc:de:66:50:f4:50:f4:
         f3:0e:08:33:b9:de:3e:8a:81:f3:23:06:d6:f4:c1:36:99:7a:
         4a:7d:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:02:36 2026 by rpki-client