Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
File:                     Swkt8QQoD0W8PyeW9AHMK0xhROk.cer (raw, json)
Hash identifier:          wXTTL7pDmvjy3DSTdyorkPjHEJzTjQ3fhuCTHBsS/QY=
Subject key identifier:   4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7690
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:57:04 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 161.248.6.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30352 (0x7690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:57:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:e8:59:7f:fa:c8:c2:1a:0a:71:e2:df:da:
                    ec:fb:72:41:4b:f8:0e:77:fc:d8:4c:84:78:dd:27:
                    22:44:4e:c1:16:8a:6f:28:1b:ff:26:d8:98:2e:69:
                    8f:54:bc:89:2f:57:18:63:15:c8:c6:89:8a:5d:a5:
                    a2:3c:5a:ef:3e:a9:70:cd:08:e9:96:6e:32:68:fd:
                    75:08:a1:ea:81:bf:61:b9:2b:88:ac:76:8c:2f:81:
                    c8:77:38:e0:83:2f:25:2a:f7:6a:86:bf:f1:63:8c:
                    3c:49:1b:c7:68:57:ce:28:f6:46:72:c0:43:48:6a:
                    b4:88:ab:01:80:58:8e:2f:fa:9a:6f:95:3f:eb:83:
                    4b:9d:e4:7c:46:02:35:eb:1b:1e:0f:51:63:3b:36:
                    94:70:cd:a9:83:59:2e:d9:0f:c3:01:e4:80:6b:09:
                    74:15:b2:cd:38:1e:29:22:02:bd:bf:c2:ac:f0:b3:
                    9b:50:9f:07:95:a2:53:9e:3e:6b:02:60:82:76:fe:
                    28:a3:76:47:8f:68:06:cf:36:47:b4:2a:91:00:3d:
                    23:0f:67:36:f2:13:f4:36:08:98:1e:d9:ca:5c:30:
                    ea:e6:db:f6:fd:df:1e:11:e4:4b:87:ee:3c:2a:b5:
                    fb:0b:bf:c2:b8:24:cb:9d:85:bb:65:85:27:29:8b:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c9:af:fe:11:a1:a5:0a:1a:1b:2c:0d:4c:9c:fa:64:1b:a8:
         30:1d:16:ad:83:e1:97:ee:e1:ab:ad:1d:b4:01:ed:df:8a:70:
         cb:99:3a:8b:07:aa:2c:04:f2:d7:39:ab:34:d7:14:03:ac:b8:
         c0:37:32:ef:37:61:5c:4a:4f:d2:bf:b7:31:7e:fa:64:8a:e5:
         c6:5b:ad:d0:9e:1f:4c:9b:da:c9:69:ad:0c:82:ec:e7:3c:bc:
         ab:b6:ba:1d:1c:4a:98:5a:74:c0:aa:7c:22:b4:14:ec:4c:b3:
         16:45:ed:a3:bb:57:c7:b5:be:2e:6c:bd:e7:fd:4d:16:b3:c9:
         a0:98:1b:b6:95:fd:91:43:2f:55:ae:b4:e6:91:b9:9a:6e:17:
         7d:04:f8:0e:d8:1f:ef:c5:4d:29:01:9c:26:ce:12:c2:2f:25:
         0c:6e:ec:31:34:14:8e:7b:af:ce:5f:16:a8:8d:88:b5:fd:8f:
         c0:5e:13:e2:a3:c1:c5:36:a4:82:a4:58:0d:6f:83:b2:a2:ce:
         d1:64:a8:45:45:a2:a4:fd:7e:d0:b7:a5:70:01:7a:81:ea:43:
         c0:69:56:d3:61:54:51:24:f0:01:31:ce:ad:6d:bc:67:d0:56:
         5c:77:d1:b0:8c:3f:d0:9d:78:a9:d6:76:ea:8e:f1:d5:94:35:
         46:d8:b5:34
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NzA0WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDODMwNzExMC8GA1UEBRMoNEIwOTJERjEwNDI4MEY0NUJDM0YyNzk2
RjQwMUNDMkI0QzYxNDRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APEN6Fl/+sjCGgpx4t/a7PtyQUv4Dnf82EyEeN0nIkROwRaKbygb/ybYmC5pj1S8
iS9XGGMVyMaJil2lojxa7z6pcM0I6ZZuMmj9dQih6oG/YbkriKx2jC+ByHc44IMv
JSr3aoa/8WOMPEkbx2hXzij2RnLAQ0hqtIirAYBYji/6mm+VP+uDS53kfEYCNesb
Hg9RYzs2lHDNqYNZLtkPwwHkgGsJdBWyzTgeKSICvb/CrPCzm1CfB5WiU54+awJg
gnb+KKN2R49oBs82R7QqkQA9Iw9nNvIT9DYImB7Zylww6ubb9v3fHhHkS4fuPCq1
+wu/wrgky52Fu2WFJymLU9UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRLCS3xBCgP
Rbw/J5b0AcwrTGFE6TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzMDcvMkJDOTI0NTBCRUNEMTFFRjk4Qzc0MTMyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM4MzA3LzJCQzkyNDUwQkVDRDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFv
RDBXOFB5ZVc5QUhNSzB4aFJPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4BjANBgkqhkiG9w0BAQsFAAOCAQEAbcmv/hGhpQoaGywNTJz6
ZBuoMB0WrYPhl+7hq60dtAHt34pwy5k6iweqLATy1zmrNNcUA6y4wDcy7zdhXEpP
0r+3MX76ZIrlxlut0J4fTJvayWmtDILs5zy8q7a6HRxKmFp0wKp8IrQU7EyzFkXt
o7tXx7W+Lmy95/1NFrPJoJgbtpX9kUMvVa605pG5mm4XfQT4Dtgf78VNKQGcJs4S
wi8lDG7sMTQUjnuvzl8WqI2Itf2PwF4T4qPBxTakgqRYDW+DsqLO0WSoRUWipP1+
0LelcAF6gepDwGlW02FUUSTwATHOrW28Z9BWXHfRsIw/0J14qdZ26o7x1ZQ1Rti1
NA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:26 2026 by rpki-client