Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
File:                     dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer (raw, json)
Hash identifier:          kkIKy/jgNnPRB0qTYW154aHk+/P2Z8PqhDtDrrRJuKQ=
Subject key identifier:   74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       756B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:51:11 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.10.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30059 (0x756b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:51:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:70:0a:5f:76:09:29:89:04:ee:ae:4a:65:
                    a0:08:4e:61:4d:3e:83:51:b4:e6:92:c5:e0:5f:d5:
                    a8:76:4d:e9:b2:20:93:55:b1:cf:97:60:f1:7d:26:
                    28:c1:5a:4e:bb:b4:91:d6:7b:3a:bf:33:3e:d6:30:
                    43:ae:0d:74:92:f6:ff:71:46:b3:a3:93:9f:09:74:
                    47:f0:ac:03:3e:3b:55:4c:cf:f0:9b:15:0f:04:95:
                    15:65:72:53:29:14:68:4c:b8:61:31:c5:9b:90:a8:
                    96:0a:15:c1:be:39:67:9c:b6:fc:25:ee:ca:8b:e3:
                    cd:15:a4:d8:d8:e8:07:89:b2:ae:70:22:17:23:e6:
                    6c:4e:49:87:81:c4:e6:db:b4:84:27:58:4b:a9:ce:
                    98:d2:3c:61:0b:b9:42:92:0d:b7:a3:33:0d:97:6d:
                    ae:a9:53:d5:15:f2:fe:8a:5f:ce:ae:4f:0c:ff:ce:
                    bd:d9:09:d8:f8:63:f3:b1:c8:1d:f2:6f:e2:b7:ca:
                    90:50:96:42:01:c4:cd:d6:fa:76:0f:bd:ba:e4:1b:
                    53:f7:12:17:49:ea:e0:20:21:0f:1c:10:1f:ed:42:
                    c0:ef:0b:a8:b2:28:a2:ab:bf:ca:ba:19:ba:d5:39:
                    e7:50:9c:c8:f8:61:6d:63:e5:0a:6b:14:8e:63:46:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:cb:d5:45:af:03:10:4d:6d:7b:c0:4f:3a:2b:f6:b4:38:
         c1:c5:e1:59:1d:0e:9d:71:d9:5f:c4:89:7b:0e:07:23:dd:e8:
         d0:7c:b4:5d:76:8a:98:7d:3c:c7:ff:68:c6:56:a0:eb:d8:54:
         db:24:85:d4:82:83:8c:83:2c:9a:cf:43:ec:20:c0:1b:b3:af:
         c9:4d:f3:73:56:02:19:0b:7b:33:8e:99:79:22:0b:9a:57:6b:
         08:94:58:fa:20:ff:88:38:e5:1f:5f:01:c5:65:70:9c:3f:a0:
         41:55:8a:8c:a5:15:b9:b1:4e:ec:46:12:5c:ad:9a:ae:66:1b:
         0f:5e:3c:6f:a2:53:28:42:b1:41:3a:d3:29:49:a7:6c:15:99:
         a4:d0:92:5a:73:f2:99:52:a8:d8:54:62:93:67:a1:8c:10:ae:
         d9:71:76:ec:85:02:0f:a2:be:67:58:fc:63:96:da:13:39:85:
         69:0a:6c:c0:6a:6b:56:97:d6:1b:60:99:c6:b2:1a:3a:c7:50:
         42:58:54:c6:dd:2a:17:04:fc:0b:f4:41:ee:d2:40:97:25:92:
         c6:e4:92:8b:8b:bd:ee:ef:6b:b6:92:29:1b:e8:25:10:c6:89:
         73:91:89:e0:a1:89:ac:45:82:0a:46:ce:67:8c:16:85:4a:93:
         b4:b5:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:28 2026 by rpki-client