Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.cer (raw, json)
Hash identifier:          Lmld6jDZUpQSfLsPFjg5m9ihXx3aIEzO4y/HH7b2ef8=
Subject key identifier:   83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       767B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:56:40 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    IP: 157.15.190.0/24
                          IP: 160.30.133.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30331 (0x767b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:56:40 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:34:61:20:aa:b8:e6:6c:45:d2:36:86:ee:ff:
                    99:5f:0f:aa:92:b5:68:5b:d1:21:47:fd:8a:cc:97:
                    dc:95:60:a7:2e:34:a2:9d:c1:55:55:87:63:cb:3c:
                    e9:a6:16:25:b7:60:ba:65:fa:30:c8:b6:8f:df:49:
                    11:60:37:83:0b:3e:ed:86:4a:90:c9:c9:0a:a2:fb:
                    39:17:10:23:49:00:57:03:ff:49:02:0f:a4:ed:79:
                    d3:5a:93:21:bf:84:c0:30:92:41:2c:e9:79:8e:6b:
                    7b:cb:e3:ef:f3:da:2d:d7:43:fb:df:01:3e:1c:f9:
                    31:27:78:7a:87:bf:57:6c:ea:a1:7a:ef:99:43:1f:
                    85:d4:3e:e9:97:cb:d8:99:9b:85:d4:dc:5a:da:52:
                    e5:a7:67:cc:2b:82:3b:9a:3a:6c:90:c4:db:46:19:
                    fb:23:ac:5f:eb:eb:b5:1e:ba:f6:c4:58:95:b4:ba:
                    aa:55:0f:94:ad:4c:b3:85:4c:c9:68:7f:7b:a9:e1:
                    2b:aa:e8:c5:2d:03:ee:5c:0d:cb:06:50:67:0c:7f:
                    d5:0f:0a:a5:ce:f9:20:d7:89:04:61:eb:c1:b3:78:
                    73:0d:87:2e:cd:2b:cd:47:e9:75:b4:19:a1:d5:03:
                    b8:1c:87:ec:9b:fd:ca:29:ff:4c:94:b1:1c:56:56:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.190.0/24
                  160.30.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:db:b4:84:84:34:c9:ba:d8:db:d1:c7:97:ce:03:a8:f6:24:
         db:a2:1e:0b:6a:62:cf:d3:6c:ac:72:84:ed:d5:74:32:29:0d:
         3e:32:a2:22:da:05:24:7b:02:7c:77:22:75:98:d6:a6:97:ae:
         63:62:ba:dd:03:ab:1a:23:23:33:a7:8d:7b:d1:e6:fa:56:00:
         33:7f:f6:fd:54:cc:12:a2:7d:6d:49:05:d7:3a:c6:ee:b8:91:
         ad:a9:fb:b3:a3:11:55:99:6c:8e:b7:d8:c5:ad:a1:a1:a9:df:
         a6:df:13:82:ce:b1:82:db:cc:f9:7d:6c:16:15:9f:85:ab:8b:
         76:40:60:61:34:7a:32:8e:18:eb:ea:72:82:83:a2:1b:b3:58:
         c3:9c:68:da:cc:44:0d:d0:c1:4d:08:96:e2:9b:bc:73:aa:63:
         4e:e3:a2:dc:d8:44:40:1b:b4:e3:48:42:b1:43:a3:65:2f:f9:
         27:40:f3:4c:42:db:99:66:7b:78:9b:d4:b6:27:45:17:b6:2d:
         a2:42:56:17:19:d9:90:c9:15:64:28:36:4b:10:ef:3e:13:99:
         79:f5:c3:05:86:51:2e:47:54:ec:69:e2:8b:99:14:9e:8b:65:
         fd:60:4d:05:ab:23:0d:92:3d:da:45:85:2f:2e:8f:ab:fb:48:
         7f:b9:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:51 2026 by rpki-client