Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
File:                     _rhjYz3rcT99klaMcXmFhLC61mY.cer (raw, json)
Hash identifier:          /Zeh8fqyR3FqY7QnlOY2az9YNvgnht/ImfPYHil6sEw=
Subject key identifier:   FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       69A9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 08 Aug 2025 21:50:01 +0000
Certificate not after:    Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 198.217.248.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27049 (0x69a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  8 21:50:01 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:f2:6e:91:87:b7:b1:3e:e6:02:1a:11:4f:
                    7a:b0:e1:25:87:94:46:3e:82:21:1c:ac:2c:63:96:
                    70:53:2d:b1:b3:d5:08:0c:65:f5:b7:64:cd:bc:ed:
                    89:78:81:21:11:db:60:1b:1d:e5:38:d4:e8:43:aa:
                    59:3d:ca:3f:3c:f2:58:19:4f:06:3f:44:0e:02:bd:
                    8c:59:9c:c8:d1:85:31:6b:9b:0c:9c:17:52:0f:bf:
                    93:05:ae:43:0b:eb:cb:06:1d:59:2a:6a:9d:e7:c6:
                    ed:06:57:0c:7b:95:3c:55:cc:cc:28:20:1a:35:53:
                    12:5e:33:63:50:09:53:86:2f:fa:11:1b:89:13:24:
                    b2:a2:36:a4:c1:93:04:2f:7f:69:a8:19:f7:ad:3f:
                    11:88:3f:24:c1:bd:04:65:f4:c4:1b:b0:80:a9:f4:
                    f1:21:55:47:95:10:23:99:bf:52:13:6a:7a:d1:32:
                    c4:f9:5e:f3:b4:03:cd:f9:d9:39:73:41:bb:8b:16:
                    ec:40:ce:ba:4a:d9:47:2b:30:32:51:43:60:f0:0d:
                    85:da:89:12:04:a9:23:d1:ef:5d:8a:d5:a5:47:10:
                    2a:c7:67:58:52:fa:8c:13:a0:fb:1d:6e:e5:9f:22:
                    95:d0:7b:ae:ab:49:0e:a5:66:99:63:77:06:ed:79:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:fa:6a:0e:29:4d:fa:e6:70:fa:c4:95:f1:da:82:d8:71:
         b6:5b:10:62:3a:2f:de:1a:21:12:7c:bb:75:57:93:38:a0:a1:
         43:a0:ff:b2:d1:e4:2d:9a:81:c2:06:ec:00:d2:b8:a1:ad:d4:
         dd:94:1d:01:98:42:2b:d8:1d:f4:f8:e1:68:fa:3e:ab:4d:de:
         6c:14:2f:83:3e:09:83:b4:3a:e9:b1:b9:e0:d3:79:a1:8f:ce:
         c0:f4:c9:aa:95:fe:b0:62:15:51:6b:de:20:0e:64:2a:20:9a:
         1c:3e:e6:8a:64:5c:e6:ca:f0:8b:86:0b:40:14:62:46:b4:f4:
         cb:14:f6:ac:e8:4c:fe:d6:e2:38:af:45:29:e8:39:5a:9e:33:
         a3:c8:43:51:a5:f6:b1:56:98:2d:ad:11:69:4a:a6:a2:8b:1e:
         6a:be:c9:69:54:46:d6:3f:02:e6:44:2a:b2:e5:81:80:00:45:
         d5:c8:76:47:38:f9:45:c7:b7:5f:ae:bb:09:27:ce:62:bc:c5:
         a8:10:1c:a7:7e:e0:6d:3f:c4:0d:25:dc:fb:cb:48:18:69:47:
         ea:e1:44:46:bd:32:dd:aa:a4:76:9d:06:01:cf:33:93:56:a9:
         da:0d:42:4a:f2:0a:c3:8a:d4:83:3e:51:f9:4d:3d:04:12:24:
         62:5e:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:16 2025 by rpki-client