Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
File:                     m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer (raw, json)
Hash identifier:          zZwKHRzhyO3C4SB/PUjSy8IH5nMl22MYrYcbZr2BzlI=
Subject key identifier:   9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7C95
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 08 Jun 2026 13:10:33 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 143.192.96.0/20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 10:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31893 (0x7c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  8 13:10:33 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:c6:6f:96:11:c2:68:d8:f8:61:e6:fc:63:
                    33:e4:80:3e:ef:36:41:84:4c:25:c4:75:99:c4:1a:
                    10:fa:ae:0b:c0:d3:23:0f:b3:01:83:ce:29:d2:19:
                    2a:d4:c2:0a:cf:4e:b4:de:65:01:35:d2:28:02:6f:
                    b5:54:d2:b0:40:66:a5:ba:20:76:ac:5d:bb:05:bd:
                    24:8d:73:50:9d:a5:d3:b7:8f:ba:69:48:ba:00:76:
                    ac:9d:a0:ee:f4:c6:4f:e5:c1:07:9b:bf:a8:f2:df:
                    3d:a3:e4:6c:e5:4e:e7:ba:07:87:b3:60:ad:56:f7:
                    bc:1d:4c:5c:6f:29:68:b6:5a:46:44:be:41:24:69:
                    05:cd:a8:b4:84:db:86:a3:0b:94:26:f5:8f:41:7e:
                    72:e6:7d:85:7e:54:22:ac:05:f2:9f:a8:fb:08:0a:
                    39:a0:e9:a3:77:98:e6:46:4f:37:e6:14:0f:1e:a2:
                    02:97:f3:22:0d:e4:83:7b:af:e1:33:f5:45:91:ea:
                    26:9e:a7:8c:e8:70:ce:55:64:7f:1b:52:c5:6e:e6:
                    77:7d:d5:ca:f2:dc:21:d8:96:8e:cc:41:f6:8c:6f:
                    a9:ae:01:fe:0b:4a:74:8b:a0:f2:d6:1e:4d:7e:f6:
                    5d:cf:95:e8:57:b5:ae:c3:7f:89:40:b6:10:ec:be:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:45:60:18:6b:da:6f:be:9e:04:9e:26:01:8b:e1:dc:fe:ee:
         e6:34:c2:75:bd:6c:30:f7:56:c0:ef:0d:63:ef:1c:6b:16:d1:
         f5:85:7c:e6:90:bc:48:60:dd:5f:9c:b1:16:c5:4e:de:f6:0e:
         c3:96:4a:ea:4e:aa:03:d4:2f:df:80:f9:bd:11:ab:c5:71:0f:
         35:13:7d:8d:9d:82:aa:65:53:90:4d:7d:f2:26:f2:ac:4e:28:
         71:20:38:09:2b:b1:23:c1:a1:97:e8:42:7c:a2:4a:a9:a6:6a:
         af:27:1b:8c:67:57:f0:98:8e:09:34:57:56:45:cc:0a:a8:6b:
         78:20:41:9f:8e:35:c3:c2:ce:ed:b0:ee:ad:bb:32:f9:8d:11:
         ff:30:93:da:f9:81:88:0c:3e:a5:aa:66:03:85:ba:d6:44:f2:
         10:d6:e6:ea:4c:09:e6:56:6c:c5:52:28:f7:d5:e4:b4:be:b2:
         58:f0:9d:d7:ac:09:60:71:13:35:76:b7:d8:21:b7:21:70:70:
         e1:ba:e8:47:89:7e:50:bc:2e:35:dd:89:3d:93:5c:34:1d:da:
         8d:36:15:04:9a:80:01:ba:3d:15:c1:4a:92:fb:1d:96:eb:c4:
         3c:26:c8:80:8f:08:e7:15:35:e4:24:f6:4c:53:56:b8:59:c2:
         30:ee:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:24 2026 by rpki-client