Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
File:                     h_pIRIna7X3O5mDHjYe6LMGtqmI.cer (raw, json)
Hash identifier:          l8P2XAPwz31PyBRlZ/0323oq3kpGR7qKkVbNy59FpGo=
Subject key identifier:   87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       810D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 20 Aug 2026 14:07:53 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 165.99.88.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33037 (0x810d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 20 14:07:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:22:cd:f8:2a:f2:6a:25:97:b5:d3:e1:6a:
                    7d:49:f5:5f:ce:e3:27:c1:01:07:ac:18:8d:eb:c1:
                    84:3a:4f:55:1c:65:fc:df:4d:13:99:9d:ee:9a:b6:
                    a2:5c:e4:bf:94:2f:96:50:78:ff:81:34:9b:2d:5d:
                    8c:d3:f5:e2:2d:5d:f0:8a:c7:d1:03:98:4f:65:18:
                    23:c5:3a:bf:a9:eb:b0:ae:91:b9:f0:fa:0f:cf:2f:
                    e5:cb:b8:d2:e9:a2:9a:1a:98:1e:d8:9c:de:53:86:
                    2f:45:09:82:4e:a5:c8:b9:c9:12:d8:dd:1d:42:22:
                    e1:97:59:5d:98:af:f3:d0:b9:ac:7b:1f:3b:0a:02:
                    71:45:40:39:79:ec:8a:09:30:9d:3c:04:86:36:50:
                    db:0a:a0:8e:33:69:29:0b:0a:98:a8:58:94:55:19:
                    d5:cc:fd:1c:2b:d9:14:bd:1b:ac:cc:f1:24:16:90:
                    d2:46:9a:d1:85:ff:f0:71:cc:3b:e8:15:d0:98:b4:
                    3c:99:f2:f7:b0:04:b4:2f:a5:23:9b:0d:59:ad:b9:
                    d2:57:25:f4:0c:5c:4c:6f:5e:21:f0:2b:e9:f3:45:
                    ee:ee:2c:88:fb:35:b8:b8:26:af:80:79:7e:f4:6a:
                    ef:03:fd:c8:f8:59:40:67:28:65:80:88:7e:c4:2d:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:4e:53:e6:0a:7a:78:ce:cf:d9:cd:65:65:71:ee:61:43:
         38:bc:ab:d9:62:8a:4c:f4:50:31:de:95:47:63:2d:33:3a:5d:
         83:4e:24:65:18:66:2c:61:6b:e2:da:ca:83:a5:96:54:54:c0:
         7a:39:58:25:51:da:6e:64:25:2d:2a:7e:47:30:b7:08:17:f1:
         7b:0a:4a:05:13:ad:7e:94:f4:2e:bf:07:82:aa:5e:15:59:bb:
         39:0b:0a:b3:63:01:67:4f:93:d9:2d:49:08:fc:e9:99:2a:c9:
         2d:b8:98:ad:5f:34:1c:72:77:d6:5f:b7:68:53:70:36:19:9d:
         02:c7:ce:b5:76:b0:77:04:c9:9f:b8:e4:f1:68:71:d8:25:57:
         ca:a6:af:3f:e3:0d:f2:f3:dc:46:0c:61:b7:25:38:5a:77:df:
         57:fb:3d:89:82:e6:4c:1b:fc:f6:91:56:3c:f2:91:46:a1:c3:
         fe:07:f2:52:ea:29:a2:15:d1:ff:6e:8a:b6:81:01:a7:fa:a6:
         68:bf:8e:e5:3e:57:ca:93:2d:1b:7e:e2:ca:3a:33:82:f6:35:
         e5:ac:ad:0b:7d:61:d8:65:c7:7e:10:3f:b9:9e:c1:d2:53:ee:
         6e:72:7c:c6:89:ad:76:7e:05:c6:c2:2a:d4:c2:de:bd:6c:fe:
         6e:3f:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:11:04 2026 by rpki-client