Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.cer (raw, json)
Hash identifier:          WeGFBHbcj1EbxuNQkX6NVvPIhjLezZSGCKYl8jmH5to=
Subject key identifier:   FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       81E4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 04 Sep 2026 13:12:25 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    IP: 160.187.128.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33252 (0x81e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  4 13:12:25 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:bc:38:6d:d2:ba:3a:f2:a9:65:1b:a0:da:
                    e3:87:a5:5e:bb:e9:f8:8a:64:7f:e9:d8:19:8f:ef:
                    c0:42:cb:1e:3e:9c:f5:b6:46:d2:b6:ac:73:46:d8:
                    2b:cc:c9:eb:87:fd:bc:28:08:d9:10:55:6b:31:f8:
                    04:0c:0a:51:16:7b:2b:c7:86:56:93:1f:d8:ce:ec:
                    ce:95:ac:eb:76:c5:1e:fa:7d:f8:ad:af:7b:42:e5:
                    b7:56:a2:85:8d:fc:3f:46:af:fe:dd:91:8d:ec:af:
                    c3:30:2d:ac:a2:ca:4d:ce:51:98:b4:4f:1c:b9:8b:
                    32:d2:18:cd:2a:11:76:9d:58:1f:62:28:f7:87:eb:
                    4a:ee:11:cb:ee:af:6b:ac:7f:8b:a4:dd:82:ae:bb:
                    d1:9b:aa:9e:11:d2:84:0c:0a:39:fb:05:27:8c:ee:
                    3d:ea:86:30:bb:35:21:22:2c:b6:12:f7:f7:cf:63:
                    d2:86:a9:4a:56:27:70:b8:8b:85:49:c1:71:32:cd:
                    be:6a:6c:4b:2d:62:54:0d:b3:cc:50:3b:60:35:7c:
                    6f:5e:de:36:06:43:eb:e6:af:3b:eb:18:1d:2f:e3:
                    c4:18:7e:fe:cc:3c:c5:74:d5:d7:91:10:ff:b7:ea:
                    38:a7:52:77:55:ca:37:44:93:92:a4:b4:87:8d:63:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:74:07:a4:6f:1c:fd:5d:a1:3f:c6:b7:11:9b:03:2d:c1:09:
         ed:23:54:2b:e3:8f:02:8e:c9:44:20:0d:3f:78:07:6c:0f:aa:
         c1:29:ce:d9:10:d7:6a:66:0a:06:e2:aa:99:33:74:ea:0e:3f:
         ea:82:eb:fb:f1:2b:71:34:5f:6a:1b:f5:76:ba:8d:4a:85:4e:
         1d:f4:a9:31:05:15:4d:11:39:ee:bf:66:9e:72:58:4e:e1:31:
         34:6d:9b:07:fd:eb:b1:78:98:64:62:a9:2e:28:8b:71:7c:26:
         ca:ef:0f:57:ad:b2:9a:27:38:74:10:e7:3a:62:59:f2:cc:07:
         4a:f4:07:6d:3c:8c:d3:3a:8b:29:e6:8f:71:e5:08:e9:fe:92:
         b1:19:75:af:f1:29:6c:03:f7:a2:e0:4d:26:36:3a:df:9c:f0:
         90:44:8c:51:97:ee:00:9c:0e:16:75:0c:36:5b:7b:d3:75:68:
         5b:0e:a5:97:d3:21:41:86:f6:a4:57:c0:8d:47:96:8a:ff:59:
         90:0a:f1:94:54:b5:e1:c8:ff:84:7b:91:75:02:5e:cd:85:f8:
         9b:e2:9a:3d:12:ad:93:0d:07:5e:62:5a:17:b3:4e:ac:36:d3:
         82:48:20:b6:46:06:d2:f4:8f:5a:a5:80:7c:79:61:05:c9:3e:
         3b:91:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:02:39 2026 by rpki-client