Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p8v0c191ov3TS0AAvx1TH44RMlY.cer
File:                     p8v0c191ov3TS0AAvx1TH44RMlY.cer (raw, json)
Hash identifier:          ETKqdhilSXuIdrFlETVxN9YfLDrORuZgsOWdS+4+Iwc=
Subject key identifier:   A7:CB:F4:73:5F:75:A2:FD:D3:4B:40:00:BF:1D:53:1F:8E:11:32:56
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6D6C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9130996/1E0DA99CB92911F099FED460C4F9AE02/p8v0c191ov3TS0AAvx1TH44RMlY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9130996/1E0DA99CB92911F099FED460C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Nov 2025 02:51:14 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 165.101.196.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28012 (0x6d6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  4 02:51:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A9130996, serialNumber=A7CBF4735F75A2FDD34B4000BF1D531F8E113256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:25:01:ee:5c:9a:30:bd:88:6f:3c:f8:88:
                    12:93:d5:5f:31:2e:41:d6:15:49:1f:e0:cb:18:43:
                    c9:9f:33:c0:63:59:41:4d:c9:be:28:5b:ec:9b:44:
                    81:02:9f:62:3d:82:95:9f:6d:39:b3:94:7b:6d:02:
                    14:90:97:9d:fd:7e:f8:30:e2:49:77:55:96:b6:72:
                    bb:d7:0f:1b:57:cc:c7:17:3d:0e:75:33:a7:e2:c0:
                    84:c9:7e:86:cc:0e:c3:df:2a:5c:9b:31:08:86:5d:
                    36:9f:82:3a:b4:72:b7:89:1c:c0:82:72:4a:eb:53:
                    d1:21:66:65:cc:58:6c:00:5a:22:c3:e8:1a:a0:ba:
                    b7:ad:4c:43:25:5b:24:f5:31:8b:ef:2a:82:ab:81:
                    99:c3:86:32:16:6f:6c:e0:62:05:ca:60:63:9c:a7:
                    71:0c:0c:70:bc:55:f8:2f:65:c1:b5:63:fd:7c:3b:
                    f1:d9:58:ad:9f:a2:61:82:d5:4a:45:ea:97:5e:fa:
                    f4:fb:aa:7e:a2:1b:cf:7e:d0:84:da:cf:0b:88:19:
                    d8:70:48:a1:ea:e8:af:20:97:9a:e9:8c:4e:83:b4:
                    e7:ae:20:3d:3f:03:3f:39:f6:0c:0d:8d:65:e2:f2:
                    1c:92:f5:48:34:df:60:f9:b0:4e:78:a3:d2:80:af:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CB:F4:73:5F:75:A2:FD:D3:4B:40:00:BF:1D:53:1F:8E:11:32:56
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130996/1E0DA99CB92911F099FED460C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130996/1E0DA99CB92911F099FED460C4F9AE02/p8v0c191ov3TS0AAvx1TH44RMlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:68:b6:28:65:60:36:b5:9d:b2:8b:8f:52:a2:aa:77:3c:ce:
         36:40:23:6c:6c:6c:99:ac:70:71:4b:2e:c3:58:15:16:2e:03:
         0f:42:50:97:82:55:ea:26:b2:96:18:05:bc:11:f6:80:c1:50:
         79:97:41:ec:52:4b:61:91:60:e6:42:4a:57:39:96:d7:ce:50:
         32:26:6d:c5:91:5c:32:8d:78:74:30:03:cc:9a:1b:4a:51:81:
         42:18:0a:39:c9:bc:d3:3e:cd:32:88:6b:4d:55:33:ca:9c:d9:
         7f:42:9d:65:98:60:d8:fe:da:40:44:57:4e:26:4c:64:87:b4:
         40:ee:3b:fa:be:4c:f2:e2:d1:7c:f2:38:34:81:40:36:c4:ab:
         6e:a6:a2:15:98:4b:e6:47:d0:61:16:36:ad:b0:30:39:67:c6:
         81:27:79:00:9d:ca:78:ef:90:c7:10:72:c0:98:0c:d5:dc:a4:
         4a:d3:eb:2f:aa:6d:c9:ca:58:8c:ac:f7:48:0f:3d:30:b2:bd:
         38:5c:75:c6:31:8f:f3:05:de:c0:c3:02:eb:12:63:74:48:06:
         ab:1c:b7:05:38:c7:24:7b:f5:c1:a0:0b:2c:25:a7:86:9c:a8:
         03:c1:da:00:a1:25:68:36:86:27:00:0d:53:80:17:e5:3d:e4:
         cf:7b:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:38:24 2025 by rpki-client