Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
File:                     c27zV-8j8z6sB7J06l4_7A3-5Yo.cer (raw, json)
Hash identifier:          hw+tR/U2MJLq1mDMPmI9uzj5NCcx19DCBQpluuNcOI0=
Subject key identifier:   73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       809F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Aug 2026 13:31:17 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 192.188.90.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32927 (0x809f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 12 13:31:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:88:5f:65:ea:6e:84:0d:36:da:76:a0:d8:
                    87:01:d9:d6:a9:69:03:a7:60:12:ac:ca:83:b3:3d:
                    28:52:11:ce:21:1c:ad:91:28:6f:44:05:bb:b8:f4:
                    17:95:46:48:de:f3:36:32:24:81:e9:53:ac:43:74:
                    bf:60:3b:d6:87:59:fe:59:35:63:01:82:4d:56:ae:
                    37:d4:e3:ba:8c:82:62:c6:04:c4:ae:da:14:e3:ff:
                    1a:89:ea:e0:72:57:02:02:5c:29:c1:de:87:6a:d4:
                    b0:4a:fd:31:4d:9b:d3:f1:47:43:15:4e:2a:23:ce:
                    eb:ea:72:24:06:68:a3:2f:b1:2f:b6:28:8a:de:98:
                    a3:50:4d:f6:05:b1:50:e7:2e:73:cf:73:71:f5:06:
                    15:41:7e:09:48:90:21:b2:d8:a9:c1:35:a0:f3:e8:
                    f2:63:c1:b2:6c:77:0c:02:1f:9d:85:e4:66:9a:ba:
                    74:0d:41:ba:f8:3b:73:14:88:a9:4f:55:73:84:51:
                    ee:a7:67:1e:bf:e1:7a:75:b9:35:66:8d:a4:a6:32:
                    36:41:87:1c:32:d9:50:3c:b6:db:c5:56:60:7f:4d:
                    e0:a0:31:7f:86:7d:21:4a:64:bf:d5:2a:04:59:3c:
                    e9:60:ae:52:44:a0:3a:b4:85:f1:d4:de:b3:08:b8:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:f0:bf:07:ca:3e:3e:20:bf:67:71:cc:3c:34:77:ff:ce:
         e4:e8:fc:14:a8:8a:3b:32:56:fe:11:ed:ce:f5:ee:d9:8a:ce:
         fa:9e:a4:12:62:e8:f3:14:7d:6a:31:6b:e5:16:c5:66:7c:e6:
         35:29:40:c6:7b:99:df:4d:69:13:11:cc:13:97:4e:7a:62:f1:
         16:8a:18:75:79:b6:a1:d8:10:ac:97:55:2b:f7:fd:fd:cb:56:
         9f:03:6a:af:be:80:ac:65:d2:77:3a:13:19:38:19:64:ad:f7:
         c1:dc:ba:a6:b9:d4:0d:43:31:0d:ca:83:5e:70:80:ef:3c:a6:
         b7:5c:2a:d2:19:82:07:f2:05:e3:ec:59:b9:b9:c5:eb:6d:94:
         88:ad:6a:48:42:5b:ea:fb:9c:84:40:2d:80:cd:c9:1b:e1:b5:
         2a:2b:11:00:95:59:eb:06:fd:0d:0f:94:06:72:cd:3d:46:82:
         ba:50:b9:86:38:aa:24:67:72:72:ec:c3:68:a5:ba:98:e6:6b:
         3f:b5:cd:7b:65:a0:f6:f4:42:d9:6e:eb:a2:1e:ef:f5:e8:99:
         9b:0c:f8:5b:62:1c:f7:c6:eb:bb:d7:6d:34:dc:97:e2:32:97:
         cc:dc:f8:e3:a3:66:dc:84:49:a0:5f:81:54:40:40:82:dd:f2:
         45:a8:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:42:52 2026 by rpki-client