Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
File:                     bvj-zvM56m3paYzCxfWGRc9l794.cer (raw, json)
Hash identifier:          vMewHu7IqInli3/1CUj8i1mb9nM9D0f45+7Raq4iYzU=
Subject key identifier:   6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7685
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:56:52 +0000
Certificate not after:    Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 157.85.80.0/20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30341 (0x7685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:56:52 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:48:2d:fd:4e:c6:93:aa:8b:f2:93:47:a1:
                    c0:49:3b:25:fa:7c:0c:b0:6c:35:98:d0:43:42:55:
                    89:03:47:bf:a4:8d:0f:9f:ba:a2:87:2e:59:0b:3d:
                    3b:28:99:b3:06:b8:51:54:a9:1a:a9:bb:ea:e6:5d:
                    b5:02:a1:e3:a8:90:26:1d:ea:18:ee:2a:1d:05:54:
                    d6:a5:99:4e:d6:3f:df:5a:3b:28:f7:2f:0a:ca:a3:
                    57:77:f3:cd:cd:83:31:6e:9b:4b:5b:23:1b:9d:62:
                    a9:79:52:c8:6b:86:dd:81:a1:87:b2:89:a7:7e:48:
                    dd:13:42:50:e7:ce:c3:92:83:2a:ff:6f:7c:3e:43:
                    64:d1:ff:06:45:fd:f5:35:b3:22:a6:54:20:73:64:
                    c0:de:d6:7d:46:1b:8d:11:f3:1b:5c:d4:3e:1b:40:
                    b5:0f:41:a5:e3:d1:d5:60:12:07:3e:c2:80:49:7c:
                    cd:bb:47:d5:83:89:b4:33:5a:29:43:73:6c:68:6a:
                    b4:9a:73:fd:40:e7:63:b0:3d:41:1d:85:34:f4:bc:
                    96:be:46:f4:f0:6a:89:cc:7e:39:90:a1:e0:61:0a:
                    7f:0b:8c:04:3d:ac:2d:b6:ab:79:bc:20:00:db:47:
                    99:28:80:22:39:22:0b:84:1f:9b:e5:5a:26:82:13:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:fd:51:4b:3d:dc:91:09:42:c8:3a:a7:14:a5:9f:6b:27:
         6e:f2:b6:45:b5:90:93:e0:19:15:7b:b6:07:b3:35:7d:af:51:
         07:43:4d:2d:ec:8d:a4:e7:3e:5c:09:52:66:52:c6:f4:5f:6b:
         1f:c2:9d:18:fd:ee:ac:65:25:e7:86:5a:9d:03:35:b2:47:2d:
         ca:dd:e2:44:fd:fb:f0:43:33:86:e1:9b:84:a1:96:4e:68:e5:
         be:f4:85:0b:33:4c:d6:45:7f:c0:1f:5b:16:f0:97:a6:c2:7f:
         07:42:73:63:ad:99:cb:8f:43:14:1e:d7:ec:5f:12:c0:d3:64:
         b2:4d:da:0e:6a:f2:38:e7:a1:da:43:d8:c5:55:7f:f5:92:06:
         12:a7:79:1f:b2:ae:5b:38:dc:9e:7c:44:13:f5:f0:ce:32:6c:
         e9:47:7b:4c:e0:cc:fd:0e:da:79:b2:89:f9:e8:32:83:ee:11:
         f0:3f:5e:fd:e8:98:97:f7:e7:8b:77:4c:c2:b7:83:f8:04:cd:
         1f:3b:26:c2:15:be:63:88:24:b6:f2:3c:f3:51:b9:8b:48:ae:
         fb:a2:d3:0d:92:6b:c9:c5:6f:cf:32:9b:60:24:40:c5:5a:cb:
         af:c3:d5:72:53:d2:1c:64:40:48:a1:13:e2:5a:33:3f:7e:17:
         d1:df:c9:16
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NjUyWhcNMjYwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5NkY3QzExMC8GA1UEBRMoNkVGOEZFQ0VGMzM5RUE2REU5Njk4Q0My
QzVGNTg2NDVDRjY1RUZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANbwSC39TsaTqovyk0ehwEk7Jfp8DLBsNZjQQ0JViQNHv6SND5+6oocuWQs9OyiZ
swa4UVSpGqm76uZdtQKh46iQJh3qGO4qHQVU1qWZTtY/31o7KPcvCsqjV3fzzc2D
MW6bS1sjG51iqXlSyGuG3YGhh7KJp35I3RNCUOfOw5KDKv9vfD5DZNH/BkX99TWz
IqZUIHNkwN7WfUYbjRHzG1zUPhtAtQ9BpePR1WASBz7CgEl8zbtH1YOJtDNaKUNz
bGhqtJpz/UDnY7A9QR2FNPS8lr5G9PBqicx+OZCh4GEKfwuMBD2sLbarebwgANtH
mSiAIjkiC4Qfm+VaJoITc1UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRu+P7O8znq
belpjMLF9YZFz2Xv3jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZGN0MvMDdGMzRGMDhBNEIyMTFGMEI4NEMxMzQzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2RjdDLzA3RjM0RjA4QTRCMjExRjBCODRDMTM0M0M0RjlBRTAyL2J2ai16dk01
Nm0zcGFZekN4ZldHUmM5bDc5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBJ1VUDANBgkqhkiG9w0BAQsFAAOCAQEAazT9UUs93JEJQsg6pxSl
n2snbvK2RbWQk+AZFXu2B7M1fa9RB0NNLeyNpOc+XAlSZlLG9F9rH8KdGP3urGUl
54ZanQM1skctyt3iRP378EMzhuGbhKGWTmjlvvSFCzNM1kV/wB9bFvCXpsJ/B0Jz
Y62Zy49DFB7X7F8SwNNksk3aDmryOOeh2kPYxVV/9ZIGEqd5H7KuWzjcnnxEE/Xw
zjJs6Ud7TODM/Q7aebKJ+egyg+4R8D9e/eiYl/fni3dMwreD+ATNHzsmwhW+Y4gk
tvI881G5i0iu+6LTDZJrycVvzzKbYCRAxVrLr8PVclPSHGRASKET4lozP34X0d/J
Fg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:52 2026 by rpki-client