Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
File:                     E0_EgN8WeugPs_TETe9qm6mZWpE.cer (raw, json)
Hash identifier:          1Ppsa5wXwPfHJF+LJLjr3jfKRAMFopCJCWEM6nFytAU=
Subject key identifier:   13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       754D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:50:33 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.248.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30029 (0x754d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:50:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:fa:f6:85:a5:ec:77:9b:5c:2d:db:66:b8:
                    8e:95:b2:c6:af:74:b6:8b:52:ad:d1:4d:bd:7d:1c:
                    20:f7:bb:a6:d7:f5:08:ae:08:d8:81:3e:f4:d5:82:
                    19:08:28:ae:f5:1c:7a:b7:2e:4e:ff:90:f5:7e:d7:
                    41:46:00:f2:85:e3:74:c8:e6:47:8e:ca:91:66:2f:
                    4e:85:00:1c:65:ec:9e:29:ec:7d:76:78:05:7f:e9:
                    a3:55:8f:e1:36:6f:31:91:67:3c:67:2f:02:01:73:
                    a2:4e:a6:2f:b8:67:a6:df:0d:79:b6:16:90:de:b9:
                    78:41:3c:1b:83:f5:a0:3f:a7:62:30:2a:e3:82:a9:
                    d5:39:4e:7d:88:12:f5:05:f2:a9:50:53:f4:4c:36:
                    2b:18:2d:60:0f:f7:06:00:30:66:7c:2d:43:95:da:
                    be:de:a7:2d:f5:3a:68:c1:da:03:63:f6:53:2b:6c:
                    a0:0c:5e:89:c5:50:68:5a:5c:75:9a:5c:6b:98:54:
                    29:cc:91:45:3d:ac:50:44:6d:18:04:79:b9:75:b9:
                    1d:5d:dc:ed:8c:dc:02:6d:72:44:94:82:08:9e:34:
                    46:59:c3:d6:70:6e:71:e1:2f:b2:88:9c:07:6b:8d:
                    3d:ca:b9:6b:0c:5e:a6:69:90:60:b5:af:62:cf:01:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:77:c1:0a:5d:25:5c:6b:87:e5:9e:44:a5:3b:48:8e:3d:4f:
         b1:ac:88:bc:da:c3:29:22:8c:52:fa:37:9e:04:76:07:e1:8b:
         29:7c:4c:b1:02:de:b9:a1:00:bd:e7:d5:cf:5a:c1:fd:57:59:
         79:e1:20:9a:c2:49:f8:94:a3:a7:62:58:23:bf:a1:e4:fb:da:
         e2:92:65:95:d0:b6:d3:96:06:9b:f4:e1:e0:6e:b5:da:ad:42:
         e9:71:a7:ef:37:78:20:03:12:6c:f4:92:30:f0:7b:39:05:39:
         bf:96:c7:c3:f7:67:2a:74:a6:9e:4c:99:a0:6d:1f:75:83:7c:
         71:65:77:46:2a:0e:e2:cb:81:0b:17:90:a5:d5:1b:7f:fa:2b:
         61:37:ea:85:64:f4:be:f2:db:4f:87:47:00:d1:52:14:14:d9:
         9c:66:e3:b0:32:d9:c4:77:5c:d9:e0:6b:3a:7f:75:4d:48:06:
         30:05:73:7d:46:ff:f0:87:8b:16:bd:7b:d0:75:0e:8f:c3:29:
         04:b9:12:cf:92:d9:b7:ea:a6:69:38:f5:0a:35:ff:71:69:71:
         13:85:3f:4b:41:82:a8:b3:27:e1:b4:c7:70:ed:f2:ed:73:26:
         52:61:f5:19:23:ac:67:be:93:d4:8b:67:4f:03:fb:9d:ba:5b:
         67:f7:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:43 2026 by rpki-client