Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
File:                     fiRDENekVusSe5JsQvJteems24g.cer (raw, json)
Hash identifier:          1Wj+VvL7T2KIVVnhgUgRSkAaJX25ZC+g9a4vsjTDhvk=
Subject key identifier:   7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7CC7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jun 2026 14:38:49 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 169.136.64.0 -- 169.136.191.255
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 10:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31943 (0x7cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 10 14:38:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:a3:fb:1b:9c:3f:a6:2d:3a:c2:21:f4:f0:
                    b4:7a:f8:90:3a:c8:a1:57:e2:f7:4f:b6:6d:fa:7f:
                    96:de:ac:5a:88:b8:8f:b5:a2:1d:e1:42:d2:3b:12:
                    1c:54:32:86:b2:0b:20:82:43:26:81:28:3f:35:7f:
                    08:a5:76:79:2f:e1:f9:c0:a5:70:49:ed:d7:3d:74:
                    95:61:da:37:df:31:16:ca:b1:f8:aa:1a:cb:4d:ba:
                    31:c7:c8:8d:28:db:79:10:ba:e0:dc:a1:c0:48:ac:
                    2f:4b:a2:4d:9e:69:44:ba:d8:3b:ad:cc:de:73:bb:
                    5f:0f:90:74:e6:7a:8c:ff:09:1f:6d:79:90:0b:20:
                    27:95:7f:ef:fb:74:b1:80:41:6d:9b:f2:2e:07:5e:
                    fb:90:8f:b8:85:09:30:17:ee:f8:17:a7:c5:d5:be:
                    d1:9a:01:9f:33:90:c0:ea:24:3e:1c:46:e7:3e:95:
                    6a:50:17:31:7f:0e:e9:5f:85:ad:27:82:2b:9e:48:
                    c9:d8:e3:5a:ab:27:0a:8a:5c:dd:e4:be:49:0e:37:
                    f2:c8:af:89:bb:15:b5:e4:0e:b0:d6:5f:ab:92:40:
                    80:3f:0d:4c:4b:6d:20:9d:d4:28:ad:74:f0:4e:09:
                    23:0c:e4:95:2b:70:c8:27:b1:f8:cb:54:6c:92:55:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.64.0-169.136.191.255

    Signature Algorithm: sha256WithRSAEncryption
         b5:35:db:3c:37:40:6c:fe:d8:9d:53:4d:a1:38:43:b0:f0:1e:
         c6:ad:a2:7b:1d:9a:8c:d1:37:68:a1:45:41:21:84:30:2d:e9:
         dd:76:38:9e:91:f8:30:f4:1b:6c:80:13:02:d4:0c:bc:3a:49:
         a2:b4:65:41:8f:3e:c5:71:b6:9b:a3:a8:66:2f:0b:63:0b:45:
         2d:1b:b0:6c:64:27:18:b8:eb:20:c5:00:ba:f9:11:9d:14:9e:
         cc:3d:33:c3:cb:04:92:b9:71:eb:e0:8c:09:b2:1e:03:2b:28:
         42:9e:bb:5b:d8:b4:b7:9a:81:eb:5e:62:93:cb:f7:95:2f:88:
         04:30:78:10:2b:69:bd:de:1b:10:21:9c:22:6e:60:bd:84:eb:
         4f:78:50:18:f7:6f:8a:88:30:06:bc:9d:79:48:13:d5:ac:cd:
         31:0a:e2:ba:24:80:ac:bf:31:7c:d3:71:bb:82:82:fd:a6:d8:
         80:d3:9a:da:de:b6:cc:f2:29:eb:ba:b4:1d:81:49:ef:a3:d1:
         1b:dc:55:c9:ee:d3:1f:48:a0:35:cf:0f:4c:82:83:52:f8:c6:
         f8:41:8c:0f:a1:8b:9e:db:f3:fa:75:91:f6:2a:29:6b:95:1c:
         e9:72:f4:de:3b:fb:c3:bb:0f:0a:27:a7:ba:56:7a:ca:0f:4f:
         fc:b7:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:41 2026 by rpki-client