Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
File:                     TxgnPYhVbjodbtgXi4CVKNmQppE.cer (raw, json)
Hash identifier:          4T9AWBfLRa6yQQ7562zRzrAws/4wfCf4OobA9lmHLk0=
Subject key identifier:   4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       83ED
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Oct 2026 12:30:19 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    IP: 160.187.98.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33773 (0x83ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 26 12:30:19 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:51:ec:1c:31:b1:7a:3b:10:0f:ad:8d:88:
                    9a:eb:40:68:cb:53:5e:15:1f:e3:7e:cb:2d:8f:66:
                    04:fe:45:97:6c:50:bd:af:e1:41:20:39:32:06:9b:
                    fe:2f:c5:cf:59:79:08:11:25:f1:9a:24:4d:f4:36:
                    bd:75:bf:30:d3:15:67:8b:11:32:6e:e5:aa:46:c2:
                    1d:2a:12:1d:3b:8f:7c:12:90:c9:3e:ec:2c:91:ab:
                    6b:63:bb:99:e0:bf:22:b3:53:45:55:b4:36:69:60:
                    58:10:7f:21:5b:31:16:1a:a4:b8:09:98:54:bd:cc:
                    d3:3d:1c:1c:89:74:db:3a:2e:ed:fc:c1:41:7f:98:
                    62:2b:86:00:2e:f7:b0:f0:4d:d8:28:d6:3d:76:4b:
                    44:09:8c:bc:e2:1f:4c:8f:fa:2c:95:5f:89:5c:8e:
                    3a:af:d6:f7:b4:9f:7a:9d:e9:68:73:79:bd:56:84:
                    37:86:d8:ab:de:16:7e:90:9f:75:b8:f3:72:a3:7d:
                    92:09:be:17:3c:f2:57:32:ac:c8:45:d2:6c:e4:ed:
                    44:44:0a:7c:0c:ca:37:41:14:b8:6d:fa:fc:40:4b:
                    a4:b6:e0:8d:ae:c1:4a:13:fe:12:59:9a:f3:02:b8:
                    fd:d9:6c:fa:14:ff:83:68:f3:7f:0d:c6:28:2c:af:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:c9:ee:30:17:62:e2:ab:0c:41:08:20:ed:70:bd:98:92:
         1c:41:7e:34:5f:df:00:37:9a:9a:14:85:3d:13:cd:7e:3d:f0:
         d1:a3:e8:39:02:0b:d5:31:4f:4e:f3:e6:94:87:f8:16:18:6a:
         5f:84:28:52:59:8d:f7:ca:e4:ea:bb:fc:8a:c3:7c:18:92:4e:
         57:7a:e5:7e:1c:fd:7c:c7:d9:bb:b1:aa:e2:47:1e:01:71:ab:
         94:74:30:da:e2:0c:61:f1:0b:2c:89:9f:d4:13:73:f1:d3:f1:
         5d:d9:9b:94:cc:f6:89:8e:de:32:10:76:1f:4e:5a:fb:f6:40:
         da:d4:eb:d0:ae:11:53:3b:6d:3c:6a:cc:d9:74:7d:83:2c:51:
         59:24:2b:ca:79:68:aa:4d:f0:a8:5f:c6:e3:a9:f4:57:35:cf:
         75:82:6b:2b:92:f0:06:28:5b:6d:02:b7:76:34:cb:57:42:ce:
         98:8c:13:de:91:51:04:50:06:1f:85:44:15:a9:2c:50:b3:23:
         b0:d4:03:0f:55:ba:8b:31:9a:e0:33:cf:12:e7:64:dc:73:bd:
         05:0c:c7:59:b3:9e:34:dc:eb:c6:00:84:36:c5:d1:4c:bc:01:
         1a:8a:5e:ff:5c:a4:a2:f1:1a:a7:c3:81:fd:c1:d7:7b:b0:93:
         3a:80:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:21:14 2026 by rpki-client