Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.cer (raw, json)
Hash identifier:          Gj7F5H+RBlWkTsSnxWvdcCq5gpWLuwQ0BdHWxApsIJY=
Subject key identifier:   54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       81FB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 07 Sep 2026 04:08:17 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 160.25.130.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33275 (0x81fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  7 04:08:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:bb:b6:8e:46:bf:c7:8a:8d:75:f6:3a:12:
                    9a:5d:f0:62:59:97:0a:8c:6b:28:b3:46:3a:fd:9c:
                    7a:1c:ab:25:29:ff:3f:57:68:79:47:1e:9f:60:8a:
                    e8:52:20:c8:7f:7a:db:b0:68:25:a4:c9:a1:91:19:
                    d1:bc:88:78:93:f6:a5:49:97:48:65:ab:9c:f0:ad:
                    98:ce:cb:e6:a1:b1:0a:92:b9:f5:95:0c:91:33:ab:
                    1d:d7:e2:14:37:73:28:f5:51:42:68:16:86:35:7b:
                    22:ca:ab:d5:ba:a6:2b:ad:74:dd:29:ec:ba:3d:d6:
                    19:c3:19:5e:c7:3b:43:6d:7c:d1:af:ed:2b:8c:75:
                    5c:85:14:21:f2:cd:8b:ea:fa:0e:36:49:d4:93:6d:
                    ab:4d:a6:29:96:e4:fc:31:de:14:2b:11:35:9e:c9:
                    06:32:f8:c1:75:b6:5c:49:76:f3:7d:94:5f:90:10:
                    6f:27:5e:58:6a:22:81:5a:9e:39:49:7b:7c:38:1c:
                    c9:24:ab:9e:c9:85:fb:a2:6e:fb:da:de:d4:ce:82:
                    ee:5a:ff:dd:ba:f9:c9:15:f0:9b:04:c3:a5:ab:6f:
                    5d:af:40:66:15:98:c6:8a:3c:a2:85:98:20:26:87:
                    4b:c6:85:22:a9:4b:4a:de:7e:87:53:ec:2e:03:85:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:59:91:b9:ac:fb:69:98:43:18:65:bc:1c:c3:25:71:4f:89:
         9b:6a:68:b3:6e:3a:ae:46:22:b0:48:6f:bd:cd:4f:e4:c1:ac:
         a9:ef:fd:6e:f8:51:29:cb:9b:2c:56:01:2f:63:eb:9b:33:c8:
         80:04:8e:9e:be:06:f7:25:07:0b:ab:c7:f7:08:09:dd:b6:80:
         93:f7:30:b3:71:99:50:c8:e1:e2:ca:86:63:0d:27:6a:26:bb:
         b8:b6:6a:f9:d6:6a:9e:b2:12:b2:d4:87:7f:ee:e9:e0:e3:15:
         70:ef:89:17:05:f9:e6:a7:58:ca:39:fd:01:ae:b9:15:7f:42:
         cd:b8:1a:e4:31:01:f7:93:4a:dd:56:5f:d7:1f:9f:5e:07:32:
         63:f3:dc:57:99:89:fb:d9:ba:cf:e3:84:e3:d1:04:3f:95:1e:
         79:03:ad:76:c6:1c:3e:c4:63:7f:b3:1a:c9:e7:bf:8f:17:5c:
         c3:c4:e8:a0:59:79:7f:b2:d9:70:cd:d4:be:42:71:af:e9:81:
         96:38:09:32:2b:bc:0c:80:65:db:f5:c6:50:fa:e4:65:fc:c9:
         ae:67:a5:36:6b:41:5e:13:81:d7:bd:ed:de:e1:35:77:77:47:
         46:bf:c8:24:b6:14:f7:5e:89:a3:d1:30:3b:a3:11:a5:2b:ba:
         f4:45:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:00:28 2026 by rpki-client