Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
File:                     W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer (raw, json)
Hash identifier:          eP1QjruXfhOZ7iZYu8H2oDi8M4eyWmeqJ5zeqGVZQME=
Subject key identifier:   5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       758D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:51:53 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 157.15.28.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30093 (0x758d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:51:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:a4:ee:08:9d:48:cd:90:37:ba:e0:c8:6f:
                    fa:26:64:ad:68:ea:ce:d9:ee:3b:1c:02:76:0e:41:
                    27:74:b2:f6:fc:c1:29:09:dd:76:1f:bd:c6:b0:af:
                    60:2f:e2:25:6d:7d:bf:a1:f0:5b:d9:42:6d:65:b5:
                    39:dc:26:a2:31:93:a8:95:9b:5e:26:c3:ef:41:56:
                    6d:e4:bc:5f:7a:8c:43:5b:da:56:10:fc:76:d5:5b:
                    0a:3f:af:b4:c2:b1:b9:39:fc:67:e3:fd:b5:ec:e8:
                    cc:63:2f:79:ab:d4:9f:e8:f7:81:b5:17:38:bd:c0:
                    13:1d:83:5d:e8:d0:7b:a7:d3:2f:ea:92:1a:14:e2:
                    9a:0c:97:1f:28:40:a8:63:8e:36:7f:89:8b:0a:ce:
                    ad:0b:eb:23:08:1e:91:47:b7:58:6e:4e:fe:3a:f8:
                    69:73:ae:f5:a7:0c:b5:46:ac:db:f7:5f:d7:b9:30:
                    1c:e4:12:bd:56:68:eb:f8:11:c6:2d:41:95:cc:e3:
                    e3:75:94:c5:89:36:ef:96:1f:c8:b2:8e:cb:00:eb:
                    a9:c7:32:c4:36:85:d7:d5:9c:d4:cf:b1:ff:9a:33:
                    39:72:e9:f2:5a:03:80:31:08:9d:2c:7c:bb:87:6a:
                    be:44:14:ea:14:01:cc:fd:59:ea:e3:a3:b3:71:4a:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:6a:90:1f:f1:98:6a:f6:87:0d:58:93:a1:37:be:e8:9b:
         2f:ce:12:15:1f:79:8a:74:7e:92:c3:49:00:32:9f:e1:f5:cf:
         39:f3:e1:0d:f1:63:f4:99:b0:f4:20:f3:8e:dc:f7:a5:38:0f:
         93:cc:a8:35:c7:bc:8c:3a:3e:d6:b8:f8:df:00:15:2e:37:75:
         f7:1f:2c:ea:09:b7:9b:c4:f7:fb:6c:19:5e:c2:16:35:e7:56:
         20:59:c5:cb:51:dc:bb:46:db:a6:94:da:aa:17:08:44:23:50:
         64:72:c6:d5:43:8b:34:7e:d1:75:41:59:13:1c:29:9d:94:58:
         cb:5b:47:e8:0d:6e:aa:81:db:73:48:ea:09:66:c1:e1:40:0a:
         31:c5:43:1e:d7:79:1f:24:72:00:88:54:ad:7c:37:4d:af:79:
         ec:d3:65:f3:59:5d:b5:b4:28:4e:3f:c8:01:01:82:2d:e0:d6:
         b8:6b:e5:89:49:ad:16:37:7f:64:54:ef:8b:77:0a:97:cb:73:
         60:7c:62:5b:03:f8:9d:a3:64:fb:dc:fd:30:2e:38:25:4b:36:
         42:ca:1f:ba:60:18:8d:0e:92:f0:e3:da:87:7b:cb:d4:c8:86:
         e7:81:0a:37:31:a9:b8:12:e2:8b:87:e5:31:f2:d4:84:87:6d:
         d8:6b:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:27 2026 by rpki-client