Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
File:                     FTXKeQmuekjAuzjAgnrtdm4w-Co.cer (raw, json)
Hash identifier:          cZo/YSOPSQ1v/KkwgPbGfPpo9NQnMQblAY8AU6bkKK0=
Subject key identifier:   15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7CAC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 06:06:50 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 160.20.122.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31916 (0x7cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  9 06:06:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:78:88:87:88:db:eb:70:a7:c6:48:8b:6b:
                    fc:01:a0:8c:90:c1:95:ab:82:13:f2:73:eb:65:32:
                    1b:39:b9:3b:9f:fc:3f:01:90:57:34:da:44:05:fb:
                    dc:b4:c7:07:9e:9f:34:70:ae:d6:af:ae:11:ca:b0:
                    4c:a8:59:10:f6:8f:ce:4b:18:99:39:24:e9:1d:b6:
                    e0:85:00:58:64:6d:d8:ac:a4:dd:53:35:e9:55:6b:
                    d2:a6:26:9a:9a:0e:2b:68:af:1a:8a:18:d8:0c:11:
                    81:55:36:9f:25:1c:f3:a5:20:42:94:f1:22:95:6d:
                    e9:df:a6:2c:29:10:11:a6:f9:08:51:02:72:fd:d3:
                    69:46:1a:83:02:32:24:bd:2f:43:9b:aa:23:a5:1a:
                    a5:e1:a3:8e:70:43:12:6a:5b:74:42:b9:ea:38:2b:
                    43:50:da:21:66:51:07:8e:7f:44:6d:51:c1:cd:b2:
                    1f:23:08:f0:5a:ca:a3:15:82:9e:f8:6c:37:68:aa:
                    fb:8c:45:42:c6:9c:f9:29:74:73:24:08:0e:65:41:
                    ae:d0:95:a4:5e:60:9b:96:d9:5e:c3:d5:4d:61:0e:
                    2c:40:1c:15:d9:33:94:54:9e:bd:a3:9c:42:9a:e6:
                    8c:e9:0f:d9:94:64:0a:9d:63:26:a6:2a:a6:b3:bb:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:20:27:65:89:37:62:b3:87:b5:e1:4c:8c:78:df:77:40:e5:
         6a:48:1e:c1:0e:01:8a:79:20:ea:a6:ce:cf:bb:3b:34:92:eb:
         63:a0:f5:63:3a:36:81:26:d9:d0:b3:91:e4:69:d0:dd:6a:95:
         e4:ac:89:7c:9f:02:31:9f:3c:b9:a5:50:27:d2:53:16:53:1f:
         dd:4b:6f:d1:4e:bb:bf:91:83:05:0d:52:e1:86:49:82:e8:8e:
         2e:ba:e4:8f:28:c1:1d:45:95:32:b1:08:29:0e:69:d7:dc:4d:
         30:fa:63:93:3c:53:6c:52:a5:ac:96:5e:ab:b1:7e:b7:8c:92:
         ab:1c:84:5e:20:f0:9c:61:24:d6:93:7f:2a:84:b7:ca:0f:de:
         3f:2a:d9:4a:6e:4a:97:ea:91:e7:a1:a3:2a:6e:68:d9:a4:a1:
         9b:91:6e:b1:9c:48:5f:72:93:20:43:79:68:8f:08:00:c1:60:
         b5:59:7d:89:9f:0d:8f:d6:78:24:09:87:1a:41:ab:ec:24:48:
         88:55:8c:cb:d5:44:ef:d4:a9:5a:23:d8:c4:24:48:03:a3:09:
         75:96:cc:ea:36:d3:76:02:af:7f:c7:36:09:83:5f:86:bd:ab:
         d7:4b:4b:b8:76:f2:7b:ce:b3:40:57:08:e3:3c:f2:28:5d:d6:
         b9:8b:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:29 2026 by rpki-client