Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.cer (raw, json)
Hash identifier:          uZbcLja+vLEcmh12MxvJ9Ci1XHz4Z9BGoPnSSpshZnw=
Subject key identifier:   3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7CAA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 05:30:12 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.22.178.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 10:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31914 (0x7caa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  9 05:30:12 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:aa:78:d0:ec:b4:86:94:2a:49:f9:47:b3:
                    e9:9d:1e:cb:1d:14:ee:b7:36:e4:8e:1a:60:d9:9e:
                    48:04:15:93:11:63:24:75:ea:7f:1f:72:c3:7c:ca:
                    94:19:ee:6f:26:3c:94:af:0a:c1:d6:cf:13:10:49:
                    41:8a:b8:93:72:bd:e5:0d:84:17:12:20:de:6e:bc:
                    f8:60:3b:08:cd:51:67:c1:cc:a5:cb:de:34:29:32:
                    f9:51:3d:8d:72:8d:27:a5:5e:bc:8b:1e:d5:79:66:
                    77:39:9e:21:56:d2:65:e8:57:b1:29:97:fd:76:bd:
                    2b:f3:2f:ad:a0:9c:dd:c4:19:0e:74:84:57:02:81:
                    bf:38:3e:86:0a:85:c9:2e:39:54:26:d8:21:69:a4:
                    56:42:51:e6:f3:78:0f:c1:99:13:ed:e2:89:1b:75:
                    a2:a2:09:67:1d:b0:8c:e1:31:ea:c2:e3:f1:61:db:
                    60:36:8d:09:a5:dc:ad:60:3f:b1:bb:c8:c6:c1:ed:
                    8a:ca:cd:b5:4b:b2:7b:31:ab:a6:4c:4b:66:1f:8e:
                    3d:57:50:f9:87:5c:cd:31:07:80:ad:b8:1b:60:ba:
                    ca:75:a3:09:4b:f0:84:1b:17:8f:25:70:63:be:f7:
                    b5:49:25:33:f2:bf:41:9f:3f:f7:1a:a2:70:f6:02:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:bc:30:11:94:33:e4:69:70:1d:3d:c7:1a:59:95:ef:bd:
         14:21:48:b7:05:be:d1:89:1a:f4:38:0b:02:c8:04:18:50:4f:
         34:6f:7b:f3:c5:78:57:f1:42:47:09:14:09:7c:ea:9e:5c:e8:
         e3:1a:25:20:36:d4:07:53:ed:5b:05:05:d0:d1:7b:39:62:9e:
         a2:23:36:b4:bf:a3:6d:05:24:cf:63:65:c5:b2:d3:c0:fd:f6:
         94:db:57:1c:07:55:ed:67:fc:c5:c8:6f:4b:87:56:ca:3e:18:
         ec:8e:00:24:89:cf:aa:42:7c:4c:75:68:24:3a:68:3d:ad:d0:
         d2:cb:46:ba:e2:d8:16:07:f2:df:df:a3:07:36:fe:af:26:3d:
         1c:09:7e:da:9f:a8:c7:7b:ae:76:4d:18:ae:b1:e8:93:b4:e7:
         74:c4:41:b2:5e:98:14:72:1c:5b:dd:48:70:5e:50:d3:05:d1:
         4e:31:09:c0:98:2b:51:bd:be:d2:94:d5:63:6c:b0:6b:b8:10:
         a0:6c:d3:e7:31:51:d9:8b:2b:ac:fc:b5:a1:a5:11:ce:c4:59:
         b0:ec:bf:0b:72:7c:4b:90:69:7c:1c:8e:23:4e:8a:fa:97:4d:
         58:c3:69:24:0f:75:17:6a:70:fd:d8:48:1c:0f:61:74:ee:75:
         93:c6:c0:a5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjA5MDUzMDEyWhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEMEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEw
QkE2MkE4NERBODVGRTZFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALhyqnjQ7LSGlCpJ+Uez6Z0eyx0U7rc25I4aYNmeSAQVkxFjJHXqfx9yw3zKlBnu
byY8lK8KwdbPExBJQYq4k3K95Q2EFxIg3m68+GA7CM1RZ8HMpcveNCky+VE9jXKN
J6VevIse1XlmdzmeIVbSZehXsSmX/Xa9K/MvraCc3cQZDnSEVwKBvzg+hgqFyS45
VCbYIWmkVkJR5vN4D8GZE+3iiRt1oqIJZx2wjOEx6sLj8WHbYDaNCaXcrWA/sbvI
xsHtisrNtUuyezGrpkxLZh+OPVdQ+YdczTEHgK24G2C6ynWjCUvwhBsXjyVwY773
tUklM/K/QZ8/9xqicPYCYk0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ8tKkAQYvp
3NxeBKC6YqhNqF/m4DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBGQ0IvODlDNzhGNzA4MTY5MTFFRjgyMTNGQjBDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQwRkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdM
NmR6Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAWsjANBgkqhkiG9w0BAQsFAAOCAQEAsAK8MBGUM+RpcB09xxpZ
le+9FCFItwW+0Yka9DgLAsgEGFBPNG9788V4V/FCRwkUCXzqnlzo4xolIDbUB1Pt
WwUF0NF7OWKeoiM2tL+jbQUkz2NlxbLTwP32lNtXHAdV7Wf8xchvS4dWyj4Y7I4A
JInPqkJ8THVoJDpoPa3Q0stGuuLYFgfy39+jBzb+ryY9HAl+2p+ox3uudk0YrrHo
k7TndMRBsl6YFHIcW91IcF5Q0wXRTjEJwJgrUb2+0pTVY2ywa7gQoGzT5zFR2Ysr
rPy1oaURzsRZsOy/C3J8S5BpfByOI06K+pdNWMNpJA91F2pw/dhIHA9hdO51k8bA
pQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:39 2026 by rpki-client