Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N76N319WZKtSmgMxMoljYQ46mqY.cer
File:                     N76N319WZKtSmgMxMoljYQ46mqY.cer (raw, json)
Hash identifier:          v4JcA+J/U7+CJsd4dyX5E0z6WpfQkZHb+PoUf8dNPZQ=
Subject key identifier:   37:BE:8D:DF:5F:56:64:AB:52:9A:03:31:32:89:63:61:0E:3A:9A:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       8220
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B54AA/01E4B09EACFD11F1BA5A56E13611F970/N76N319WZKtSmgMxMoljYQ46mqY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B54AA/01E4B09EACFD11F1BA5A56E13611F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Sep 2026 09:50:12 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.110.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33312 (0x8220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 10 09:50:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91B54AA, serialNumber=37BE8DDF5F5664AB529A0331328963610E3A9AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:e9:ee:31:7a:d8:cf:8f:b8:f8:7c:46:c1:
                    11:4b:68:cc:4f:33:53:3c:ae:66:cb:81:df:bf:02:
                    9e:8f:10:c0:9c:94:bf:f1:41:8e:78:a0:61:14:ad:
                    d2:71:b0:92:18:c1:42:eb:66:ee:4f:2f:9b:ac:94:
                    f2:7a:44:7d:2f:c8:12:19:3d:84:c9:db:4c:7d:79:
                    f2:9c:5c:23:1f:c0:49:44:f6:c7:42:cd:40:78:80:
                    11:1e:4c:00:bb:73:93:6c:07:96:11:da:69:0c:40:
                    ff:ad:ff:87:03:39:16:40:25:ce:f5:f4:1e:57:4e:
                    2c:21:18:df:63:03:1c:eb:1e:2b:f7:99:09:a7:c3:
                    79:56:45:e9:1a:bf:3f:61:ea:fb:d9:c3:25:ea:93:
                    af:8e:2a:2f:07:8d:a1:08:53:99:ec:1d:dd:d1:95:
                    7a:f3:8f:5a:1e:0b:d6:bc:dd:91:9b:9b:a7:85:73:
                    c4:80:8e:6c:ad:62:2c:5d:05:6b:7d:cd:c1:2b:8e:
                    01:c3:e7:f2:61:ed:19:06:4f:26:a9:8e:98:35:12:
                    44:f8:f6:6b:88:bc:4e:86:ae:a4:32:73:a1:32:dc:
                    d9:68:b4:1b:4d:61:cc:94:98:3c:c2:ee:35:ef:ac:
                    c0:4f:37:ae:3b:14:50:2f:b1:92:30:d7:63:56:bd:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BE:8D:DF:5F:56:64:AB:52:9A:03:31:32:89:63:61:0E:3A:9A:A6
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B54AA/01E4B09EACFD11F1BA5A56E13611F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B54AA/01E4B09EACFD11F1BA5A56E13611F970/N76N319WZKtSmgMxMoljYQ46mqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:47:cc:66:f7:31:03:38:87:a2:bb:f8:3c:08:2e:89:d7:18:
         bc:47:da:36:9a:63:29:7d:17:9f:a2:d9:53:d6:9a:95:6c:c1:
         b5:43:8b:e3:fa:16:5b:a3:d7:ca:d4:11:bb:49:86:9c:95:5f:
         22:d1:ee:74:ba:82:f6:05:f0:7f:d4:9f:1f:22:5b:3f:45:86:
         d7:80:e4:fb:b9:8c:5a:cf:5e:8e:a6:7b:ab:3b:b4:a5:a0:59:
         10:ba:94:71:d7:09:fe:5e:ed:f5:83:dd:93:b4:30:5e:20:f6:
         a5:5b:fd:23:27:2c:42:21:7c:0e:12:ca:5a:1b:99:2c:63:69:
         1d:37:a7:9a:de:4f:f1:a9:7b:ac:8d:b6:63:30:cc:d2:41:b8:
         af:03:8e:24:53:e6:f6:7a:f1:49:be:ef:0b:65:e6:b4:26:fe:
         29:d4:cd:7c:aa:a5:24:27:52:4f:77:18:e6:73:54:67:a4:a2:
         07:fb:15:69:f3:04:d6:08:2d:f4:a6:6e:7b:ea:aa:1e:49:52:
         85:02:37:06:4b:67:bc:c1:66:8a:d4:91:8b:a1:4a:b6:a8:fa:
         25:8c:17:9e:d7:99:7e:c0:ba:16:50:0f:78:df:ea:94:0a:10:
         ec:37:a1:1c:61:d0:0e:f6:e1:15:40:d3:1f:d3:e3:9b:39:9c:
         2d:4f:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:44 2026 by rpki-client