Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
File:                     TmiwSN0926X0ePH9KIqGGLqfq6o.cer (raw, json)
Hash identifier:          dQ9MyCqdXxwF5aoORQVgvIQG8zWkVnBGMGZ0Ci37hsE=
Subject key identifier:   4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       795E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Apr 2026 15:17:46 +0000
Certificate not after:    Sat 01 Aug 2026 00:00:00 +0000
Subordinate resources:    IP: 157.10.224.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31070 (0x795e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr  1 15:17:46 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:b6:8d:d3:e0:83:84:9d:cf:7b:41:f9:7b:
                    48:c4:a8:b9:a9:59:93:76:76:0f:09:3f:6b:0d:81:
                    7a:13:30:b5:69:4e:9d:f3:d0:d9:36:94:c8:f9:02:
                    65:b2:6b:2c:6c:39:42:17:27:36:91:da:6b:44:39:
                    23:15:a0:f9:05:6c:3d:cc:f2:a1:6c:e2:ad:05:b3:
                    59:cb:94:ea:f6:96:7f:40:46:2b:83:27:73:b5:77:
                    28:0b:15:35:c1:98:7f:00:0e:6e:ad:db:54:c2:17:
                    b4:f4:42:98:7a:16:f0:ec:0f:4a:5f:8d:4c:d3:b2:
                    e2:f0:c7:26:ae:1c:c7:c3:f0:26:d9:ed:15:ea:d0:
                    25:aa:45:f7:7e:3a:e8:e3:2d:59:4c:d7:19:3d:c5:
                    a8:a6:7a:d0:84:b1:49:ff:78:41:40:da:b6:8a:e0:
                    aa:a0:cd:a8:79:d8:42:db:a8:58:22:bb:e0:f3:5c:
                    13:f9:02:a6:ea:28:62:a6:2c:68:0d:25:9a:d9:e5:
                    48:66:e0:46:63:57:b4:1e:6a:8c:61:9d:e8:95:93:
                    86:83:82:45:88:73:08:4b:50:85:70:b8:3a:1b:c8:
                    8f:15:2f:bf:83:a6:44:68:6f:e4:2d:61:97:90:e6:
                    50:a4:5c:14:6d:f7:92:97:99:40:7f:51:13:2a:2d:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:ac:4e:79:e4:fa:7f:80:53:e6:ec:eb:63:68:08:42:6f:
         4c:6f:31:c5:f6:65:f6:ca:75:5b:37:ce:35:49:e4:73:08:31:
         bd:58:c6:9b:8a:a4:6b:92:f4:03:61:1d:0e:c2:5f:c5:03:1a:
         27:ba:b8:48:f5:de:20:6e:3e:b8:b6:85:70:a4:14:0e:1e:5c:
         e7:cc:66:8f:90:f6:7f:51:8d:31:d9:72:41:16:a0:be:ef:24:
         06:77:58:bc:ca:85:63:fe:6c:b8:20:01:4d:83:ba:f0:40:4c:
         97:62:e0:90:e2:77:22:9c:40:08:d2:53:e2:8d:38:0c:40:b7:
         42:1c:9d:03:4a:cd:31:6b:1e:d5:40:89:7b:b3:cb:d0:6d:bf:
         ac:72:d1:ff:16:b1:e2:7d:36:ff:ba:ff:e9:73:04:47:93:e2:
         01:3d:84:e0:3e:d8:fd:9d:7c:57:d6:e0:48:65:7c:11:58:6e:
         2a:32:35:37:5a:f5:6a:c0:29:d8:81:ef:7c:4f:1d:40:03:69:
         3e:ba:ae:6a:33:fd:25:e1:d1:5a:4c:74:0c:9f:c5:3c:76:ab:
         d0:6a:ad:fb:0c:c8:31:7f:f3:24:bd:82:c1:e2:90:6b:10:19:
         7c:64:81:92:e7:ea:b8:9d:fd:64:fe:b9:6b:9f:12:13:35:86:
         76:39:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:37 2026 by rpki-client