Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
File:                     rXVQArP_DnYnxKnah3pQV1LgFvY.cer (raw, json)
Hash identifier:          L+7FJfZEqfQgVRbaWnmEErUlOB0y5TUW9nsDQxBvSr4=
Subject key identifier:   AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       755F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:50:57 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 138.252.146.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30047 (0x755f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:50:57 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:dc:40:a3:a1:30:61:a5:e3:52:df:9c:9a:
                    35:0e:57:85:3f:67:c4:37:30:c9:b3:3d:64:55:9a:
                    12:dd:6f:d7:ce:20:57:e5:b2:28:b3:35:66:4c:9a:
                    a4:27:01:02:59:ec:53:8b:85:0e:c9:cc:6f:dc:53:
                    c7:ad:85:91:0f:a9:91:76:19:e0:2b:ef:58:b3:ae:
                    51:48:ea:b8:c7:f9:3e:ad:db:ca:04:76:3b:32:9d:
                    16:d1:75:d4:52:f6:06:e0:6f:77:b7:34:4e:98:00:
                    84:fa:a7:03:44:ec:a5:da:7f:70:6c:94:a4:1c:4c:
                    6f:c0:e1:fa:07:2f:51:0f:e4:69:99:43:be:8c:99:
                    ee:55:27:f4:86:9b:40:68:9a:64:85:fe:3c:59:48:
                    dd:8b:74:dc:48:2b:bb:fb:e6:74:f8:18:0a:b4:a8:
                    8a:76:b5:e2:9c:f8:d9:24:4b:8e:f3:bc:4f:6e:54:
                    8c:74:6b:fe:48:0c:1d:e7:90:24:31:f0:a3:a6:ea:
                    3e:00:bc:db:dc:eb:d3:66:f5:d6:99:5b:bb:a6:af:
                    5f:4c:15:81:63:76:2d:6c:d5:43:3d:f8:52:66:f8:
                    1f:4d:87:19:7c:5f:74:b8:2c:2c:3e:80:d3:86:4d:
                    33:64:35:65:fb:56:50:81:6c:cf:38:31:25:fb:ad:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:19:69:f1:cf:0e:fa:61:6c:ab:4f:56:95:4e:5f:a4:11:60:
         db:b9:14:43:e1:99:54:3d:63:e9:29:a5:b1:0c:16:65:01:5c:
         d2:94:85:4b:0c:ca:40:0f:f8:14:30:da:c3:a5:e9:4b:8b:e0:
         3f:48:99:ea:52:9a:22:a8:9d:63:19:d6:b4:9c:b5:d1:73:41:
         e3:c8:e0:a6:cb:2e:e2:52:5a:89:91:15:86:b0:d7:46:66:31:
         2b:aa:ca:38:d9:fa:ca:1a:19:51:25:c3:3a:2c:c1:28:18:cd:
         1f:7b:72:77:8b:6e:89:98:e0:0a:d3:e0:cd:3b:8d:39:f3:0a:
         d2:5f:b7:7a:5c:09:4b:ef:5a:12:fc:ec:9e:d5:37:86:54:58:
         d0:13:73:fd:ca:7b:a2:54:cb:d7:2f:ad:b2:5a:54:51:64:fd:
         fe:2f:cd:1c:67:99:07:71:06:d6:98:31:b2:41:f3:21:f8:89:
         82:12:f9:be:a0:ee:7b:29:19:a0:6f:0b:ab:54:5a:a6:77:58:
         f2:f5:fa:8e:1f:d6:3d:7d:d6:da:41:99:79:57:69:a9:84:77:
         b5:45:2d:cb:be:c8:cb:2f:4e:84:05:14:50:2d:7d:72:69:f7:
         11:f2:00:fb:b7:88:4a:2e:73:21:06:4a:7d:7a:bf:8a:fb:ef:
         38:3b:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:26 2026 by rpki-client