Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
File:                     votHM7Guikc2t-kTJzPWVAkePSs.cer (raw, json)
Hash identifier:          qTwrr5ct60/zb4e14rG/INTiwfcE/nH2aD9H3WKlR9s=
Subject key identifier:   BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7563
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:51:02 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.204.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30051 (0x7563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:51:02 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:35:03:00:dd:8a:28:b0:60:eb:7b:d2:f0:
                    ab:6a:5f:05:91:53:41:7e:2c:55:bd:20:67:66:38:
                    d7:3e:f3:c0:fb:0f:51:2a:d9:34:da:0f:52:79:66:
                    69:61:12:ed:1c:98:30:4c:3b:6b:98:fd:01:ea:9c:
                    88:75:5b:54:f5:c3:6e:e5:62:87:fe:37:02:0d:e7:
                    44:b1:f9:55:1c:76:1a:3d:b9:07:af:d8:d7:c1:2b:
                    09:c2:be:39:cb:1b:3b:1a:42:cb:28:a6:b5:04:5c:
                    56:3c:19:00:d8:65:36:2e:74:ec:4b:5f:17:2a:d7:
                    9a:fa:2f:f1:b4:c1:0b:da:70:95:92:f5:0a:dc:d6:
                    f6:72:6d:53:aa:aa:78:b8:f0:92:f1:bc:10:22:8c:
                    b3:fc:01:a5:e2:e0:57:59:e1:b7:77:83:65:a6:04:
                    21:30:0b:ab:e4:2b:96:a0:d8:b0:61:09:af:6a:66:
                    28:bb:a9:e8:9e:ad:cb:f9:d8:db:bb:50:2d:f4:32:
                    e3:fd:97:34:58:6a:1a:c0:8b:81:f1:5c:68:4a:ea:
                    6c:dd:5f:1f:b7:a2:b0:62:b7:ad:bc:d8:58:b0:3b:
                    1d:d4:7d:44:e7:ad:2e:1b:4a:0a:91:4b:de:52:e9:
                    70:a4:df:67:45:4c:e9:fb:36:10:eb:00:b6:01:6f:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:18:e0:8d:12:67:85:a9:d7:6a:e8:ff:1b:d1:6b:1c:a7:
         de:b9:e0:5d:97:f4:71:99:d2:fe:c0:5c:2f:de:08:26:c5:da:
         f0:6e:1f:12:b6:f7:36:d7:1e:2e:c9:c4:a3:09:3f:43:b6:e5:
         69:d5:8e:37:08:75:d0:e0:0d:87:53:ce:22:fc:83:24:4d:0d:
         2d:de:51:4f:1b:6c:57:11:ba:63:cc:e7:34:1c:db:e2:e8:05:
         98:9c:5b:99:18:43:83:d2:d3:9b:26:bd:dc:e0:b3:7b:20:86:
         3f:12:71:1e:54:0e:ab:67:ed:b6:8f:76:81:65:5e:9e:e8:5e:
         35:4d:22:d1:97:23:a8:3f:c5:4b:97:17:60:bd:24:da:af:fb:
         61:1f:47:c9:78:ba:c4:08:92:1a:37:b2:da:61:a9:61:3a:8a:
         69:55:21:5b:77:c7:82:86:e3:24:a1:5b:e3:93:3d:06:3d:98:
         41:5b:12:c8:fd:65:12:ad:46:bb:8d:ca:e7:8d:d1:6b:89:95:
         54:45:87:3e:57:3c:90:59:12:64:b6:37:08:5d:98:e6:ee:58:
         e6:ed:8f:6b:e5:61:3c:6b:67:0d:0f:de:8d:9b:0f:71:44:ab:
         a3:3f:d2:21:d4:24:74:9f:2e:5f:91:59:39:54:32:8e:76:c7:
         b3:fe:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:06 2026 by rpki-client