Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
File:                     i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer (raw, json)
Hash identifier:          L/VO5tej8MfkEmnCjBDfkERox5Y9Fovix+UApFsRZBU=
Subject key identifier:   8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7CE0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 12 Jun 2026 06:06:24 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.207.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31968 (0x7ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 12 06:06:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9148434, serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:b3:1e:b2:ba:e9:53:75:34:fc:f4:35:9e:
                    68:c5:9a:f5:9e:b7:15:18:8e:2d:60:bb:22:e2:52:
                    d2:80:cb:4a:15:fb:70:62:c8:d4:bb:16:10:60:8d:
                    a5:8f:88:53:c9:75:06:59:a6:8f:0b:a6:1b:fd:e9:
                    b6:48:58:37:63:d1:06:c2:61:7e:05:d3:34:1a:9c:
                    45:17:4c:71:9a:02:8d:25:34:d1:fc:2f:f2:d3:7b:
                    2b:d7:f7:2d:12:9e:46:01:1b:63:42:26:84:cf:14:
                    af:84:66:f3:f0:b6:0a:30:08:be:94:e6:41:a8:73:
                    fe:b7:86:f0:80:8b:af:b5:13:d9:54:9d:2b:68:dd:
                    a2:9b:23:fc:5d:c7:e5:72:63:16:49:a3:b6:0d:d0:
                    3e:38:01:d3:a2:f6:61:31:b8:6c:d3:ac:14:fa:c5:
                    e9:fb:a2:0d:e4:94:fc:13:92:24:f5:4a:b5:62:65:
                    00:43:25:16:a8:4a:c6:d5:de:72:b5:d7:a3:22:db:
                    dc:9a:15:39:4f:fd:9b:78:ec:99:c2:38:5c:35:8a:
                    cf:48:0a:66:2a:e2:46:8b:0d:48:55:7f:e2:46:ce:
                    37:4c:a0:7f:32:d1:34:32:fc:b1:6d:3d:5b:6a:1c:
                    f5:f5:f2:46:03:81:32:0d:bc:59:1b:a4:f6:2c:53:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:77:1b:5a:77:b9:48:aa:33:f6:a0:5f:9e:05:35:f3:27:
         a0:40:5c:fe:59:0d:d3:ed:8e:e8:eb:d6:73:78:7b:4d:d8:72:
         53:22:ff:a6:03:93:54:8d:88:31:4e:3e:be:51:8d:5d:05:bb:
         13:c1:6d:e4:60:91:3f:06:fc:b9:a4:19:a2:23:52:86:59:ff:
         cd:fe:1d:72:fa:06:88:02:d3:25:40:f6:65:13:14:52:cb:9d:
         46:7d:87:76:a4:8c:9e:ac:f5:2b:e0:92:07:a3:c5:e2:6e:b0:
         7e:e7:ff:7e:da:6a:b3:f2:f4:a3:e8:55:51:ae:ae:b4:65:3c:
         b3:e7:68:84:6a:6c:30:8d:a4:76:eb:4e:7e:68:b0:f6:99:99:
         3a:7c:36:59:f7:61:a0:53:bc:41:fd:63:4c:00:15:e5:6d:c0:
         57:3a:e2:42:bc:ee:02:91:59:4f:56:46:68:41:80:e9:93:9c:
         62:f0:86:3a:64:83:e4:27:d2:89:34:c5:43:a9:a8:89:f8:39:
         61:6d:0d:e9:95:61:da:ee:5c:aa:d2:79:3e:2f:85:9c:39:90:
         da:a8:40:ae:2d:bb:07:fd:44:e0:b0:32:aa:76:94:8d:aa:05:
         6a:02:9a:19:f0:a8:af:8a:3d:e3:d5:66:97:7b:78:3d:4b:b0:
         b4:65:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:44:24 2026 by rpki-client