Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
File:                     rRUDmr5-BIRna8sqkCopVqgDzs8.cer (raw, json)
Hash identifier:          UCZ8zc2euQp3kRk8XJbR5mr1pA5fmafdWHDPBVK17PI=
Subject key identifier:   AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       75BD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:52:56 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.108.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30141 (0x75bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:52:56 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A917C876, serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:f5:91:fd:ac:f4:3f:fa:53:4f:a3:af:d1:
                    52:1a:fc:1b:32:46:d4:b9:db:17:05:a2:13:43:65:
                    ab:b3:ea:7d:af:85:1e:b9:3d:9d:64:fd:cb:45:7c:
                    66:b2:88:dd:87:75:04:f0:34:93:ae:56:79:c2:2b:
                    e6:ad:6a:c6:16:d2:ee:c1:a3:88:30:f2:f8:2f:5e:
                    bc:60:a0:c0:9c:f3:74:e2:f4:c4:ed:f1:f3:0c:90:
                    c3:25:aa:b6:22:b4:fb:80:9e:0f:bf:7d:c3:45:b4:
                    43:91:4c:0b:ac:b2:36:13:95:e3:0f:3d:20:e4:b7:
                    bd:22:28:c3:ab:9b:86:c2:4a:07:f0:ef:4c:61:4e:
                    47:f8:37:67:2d:a9:8c:50:b0:57:c0:b7:92:81:b9:
                    ef:58:0c:d3:f5:0f:c5:cf:32:a1:c1:bf:dd:9e:8f:
                    26:2b:b5:e1:6b:5c:37:ba:7d:28:da:f5:f3:3e:be:
                    03:5a:71:1d:93:1c:7a:11:ae:70:13:30:f8:89:bc:
                    88:d7:66:6d:24:58:ad:7c:d2:1d:59:7e:9d:cc:dc:
                    2f:f0:9c:12:11:4c:3b:09:47:00:e0:f5:00:31:ba:
                    f2:8d:99:5d:81:07:a2:ec:e0:f2:d3:a4:f9:af:35:
                    04:2b:6d:d1:49:cf:5c:36:b8:58:da:a5:40:38:9e:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:6a:f5:14:46:c9:1f:56:c1:ba:9e:b4:1b:89:1a:81:fe:
         5a:f6:45:64:e7:d3:fe:2d:7f:87:87:99:bc:91:cb:83:96:c2:
         55:fa:94:35:d5:44:64:d9:8f:05:85:fd:94:20:91:4a:d2:6c:
         c6:af:ec:f3:78:e2:fe:10:00:83:4e:64:7e:1e:c5:c9:90:41:
         b2:de:2d:1c:36:9b:3e:89:0a:19:9d:99:81:93:da:ce:ef:ec:
         61:bb:56:3c:c7:92:ce:12:f3:c8:9b:24:5a:54:77:45:26:9e:
         ea:fa:ef:63:ea:1c:5f:8a:a0:11:32:51:a8:b7:a3:f5:3d:a3:
         cb:6d:36:b5:b3:e6:30:47:08:c5:27:1b:74:d1:e3:3f:c1:e8:
         34:d0:50:16:bf:8c:f7:1d:90:c3:c4:49:93:c0:78:54:c1:5a:
         65:e7:79:68:12:d4:9c:c9:48:14:af:16:a3:b3:ad:4f:2d:61:
         cb:32:13:59:8e:2b:d2:53:31:0a:4f:41:c0:f1:96:2f:49:4f:
         7b:e9:a2:c5:71:ec:a1:6a:82:2e:11:c5:3b:47:2d:43:e2:b6:
         81:2a:e8:b7:bc:6d:a0:5c:4a:25:6d:8b:69:43:40:0b:b2:b3:
         2d:95:5a:db:67:fc:6a:f8:1b:f6:0e:b0:3e:e8:30:52:ec:f3:
         32:4e:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:29 2026 by rpki-client