Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
File:                     usyV7haoNg4u685zU3tvmszfLq0.cer (raw, json)
Hash identifier:          hMmG3I5AZCeJIGMjTCQ91DVt/9zXT81r7vk4t0rX5gY=
Subject key identifier:   BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       76D7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:58:32 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 138.252.174.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30423 (0x76d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:58:32 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:3d:a1:c9:7a:91:d3:63:8c:7f:df:09:d8:
                    f7:fb:12:c9:03:32:f2:64:c3:6a:68:2e:34:28:7c:
                    1c:04:6d:cd:24:ec:e4:e4:8e:49:f0:ec:43:2c:fb:
                    5f:ee:d5:92:29:fd:c1:e5:0a:ea:33:40:87:ba:10:
                    37:46:26:52:28:89:de:9b:ea:1b:c2:ca:27:42:34:
                    01:3e:5f:c6:98:bc:28:ae:8c:38:8e:a3:17:21:a9:
                    eb:39:90:8c:fe:97:ca:72:45:00:45:be:74:20:55:
                    fe:62:90:c0:fa:7f:0a:ae:49:db:bd:22:86:0c:c5:
                    f3:f0:56:61:b9:8a:89:e3:ed:bb:a2:e6:96:d5:b6:
                    ce:07:4f:23:35:da:4f:a6:59:1a:59:b4:04:84:d4:
                    0d:77:1c:35:a9:dd:e2:37:29:c8:41:c3:b6:29:11:
                    c2:70:a3:1b:20:99:c2:82:16:da:a6:6b:38:46:c2:
                    fb:3d:b5:30:8c:b1:b4:35:bd:f0:a2:a5:29:39:b7:
                    7e:c2:1c:95:14:11:a4:ef:a9:b0:28:78:c4:55:64:
                    70:c8:8a:46:6c:85:53:42:53:ad:26:3e:bd:98:a6:
                    37:5e:b5:11:df:48:c7:0b:38:86:02:dc:6a:14:19:
                    e7:13:84:cc:d1:fc:cc:35:d6:74:46:41:9c:10:48:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:e4:5c:39:5e:1c:d5:9d:58:f4:d3:03:27:5e:86:47:d0:
         29:cd:90:99:3d:81:53:ed:48:59:e6:e8:a0:8a:bd:49:93:39:
         41:8b:b0:09:1d:09:27:a1:8a:74:ca:47:cd:58:f3:b0:86:88:
         ad:f0:5a:09:4b:88:d2:99:f1:1f:94:ca:c4:00:d5:3a:48:fb:
         1c:83:1a:83:89:58:6d:e9:aa:5c:e5:83:1d:a0:cb:ab:f7:df:
         29:d9:2e:04:e3:d2:7d:58:ef:bd:b8:02:87:a8:df:4b:13:d8:
         66:f9:05:8e:77:27:85:73:5c:fa:39:03:50:99:0f:f9:ed:17:
         90:de:47:61:97:ee:0f:f6:57:f6:7d:4e:29:ee:0d:63:4e:0c:
         df:70:30:ed:0e:00:c4:43:7e:a8:41:53:74:54:d3:5d:a5:3c:
         f6:f9:0d:9a:3f:66:63:42:52:4a:f1:a5:f0:e3:ca:5e:22:03:
         2a:5d:f5:bd:10:bd:38:38:fc:f7:c0:b2:9f:c6:68:48:3f:cb:
         49:68:b6:89:43:09:b5:fc:e4:10:3e:2a:dc:95:be:18:95:57:
         e4:1a:28:59:72:e2:e9:cf:cc:21:7c:2f:13:19:dc:fc:2b:25:
         ec:1b:d5:fc:7a:19:d6:a5:35:8b:43:a9:3d:20:53:8f:7f:78:
         c0:ef:5c:7c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1ODMyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0RDNCMDExMC8GA1UEBRMoQkFDQzk1RUUxNkE4MzYwRTJFRUJDRTcz
NTM3QjZGOUFDQ0RGMkVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMxnPaHJepHTY4x/3wnY9/sSyQMy8mTDamguNCh8HARtzSTs5OSOSfDsQyz7X+7V
kin9weUK6jNAh7oQN0YmUiiJ3pvqG8LKJ0I0AT5fxpi8KK6MOI6jFyGp6zmQjP6X
ynJFAEW+dCBV/mKQwPp/Cq5J270ihgzF8/BWYbmKiePtu6LmltW2zgdPIzXaT6ZZ
Glm0BITUDXccNand4jcpyEHDtikRwnCjGyCZwoIW2qZrOEbC+z21MIyxtDW98KKl
KTm3fsIclRQRpO+psCh4xFVkcMiKRmyFU0JTrSY+vZimN161Ed9Ixws4hgLcahQZ
5xOEzNH8zDXWdEZBnBBIYQcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS6zJXuFqg2
Di7rznNTe2+azN8urTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEQzQjAvRUVENUI4RjJFNDhCMTFGMDkyQkJBRjZFNDQ2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTREM0IwL0VFRDVCOEYyRTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDL3VzeVY3aGFv
Tmc0dTY4NXpVM3R2bXN6ZkxxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYr8rjANBgkqhkiG9w0BAQsFAAOCAQEAeeTkXDleHNWdWPTTAyde
hkfQKc2QmT2BU+1IWebooIq9SZM5QYuwCR0JJ6GKdMpHzVjzsIaIrfBaCUuI0pnx
H5TKxADVOkj7HIMag4lYbemqXOWDHaDLq/ffKdkuBOPSfVjvvbgCh6jfSxPYZvkF
jncnhXNc+jkDUJkP+e0XkN5HYZfuD/ZX9n1OKe4NY04M33Aw7Q4AxEN+qEFTdFTT
XaU89vkNmj9mY0JSSvGl8OPKXiIDKl31vRC9ODj898Cyn8ZoSD/LSWi2iUMJtfzk
ED4q3JW+GJVX5BooWXLi6c/MIXwvExnc/Csl7BvV/HoZ1qU1i0OpPSBTj394wO9c
fA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:21 2026 by rpki-client