Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (raw, json)
Hash identifier:          D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=
Subject key identifier:   4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4B8D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 13:44:04 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 196.3.72.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19341 (0x4b8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jun  3 13:44:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:61:86:8d:1d:ca:f8:17:1c:fd:e1:00:c0:
                    47:20:40:e7:d2:12:15:85:10:f9:fd:e1:78:d5:61:
                    62:d4:56:8d:97:e1:f6:ce:57:d4:a5:64:7c:ba:72:
                    85:0c:bb:c9:8b:e4:d8:3c:8b:04:08:e0:f7:15:55:
                    3d:79:fd:79:94:70:c1:28:e9:fd:91:52:9a:35:10:
                    fd:db:a7:c2:53:91:73:81:aa:87:cd:82:2f:00:72:
                    f2:81:80:97:40:a6:f3:9d:d6:16:fd:42:72:0c:4f:
                    8a:9a:b5:9a:fb:54:d7:9c:2e:0b:b9:54:a2:4a:a5:
                    f7:56:38:a1:46:49:53:a2:3c:a8:8d:5e:e5:e4:a4:
                    11:14:04:5b:f3:94:5a:41:06:a0:9d:e9:1b:40:56:
                    bb:6c:ff:80:5c:d5:05:e2:bf:dd:a8:9f:11:e5:22:
                    f4:4a:cc:55:f3:37:ed:1f:0c:a7:56:48:6c:f6:23:
                    37:49:72:3a:25:ab:06:b7:52:4a:19:b0:4b:12:b5:
                    57:77:11:8d:90:5e:db:b2:57:19:f1:88:d1:21:6c:
                    bf:6b:9b:45:78:a6:33:63:bd:e3:41:c8:db:dc:91:
                    c2:e6:50:f8:88:03:d3:f3:c4:05:20:88:4a:cb:6e:
                    39:77:1c:49:02:ac:0c:d2:2f:6f:28:61:6f:26:8b:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:78:e8:b9:9e:2b:b6:10:65:58:cc:39:a5:80:de:f9:87:
         cc:f3:05:f1:1a:7e:ef:98:4a:66:17:23:23:da:f0:3a:01:b9:
         3c:41:6a:84:c0:8f:46:47:c8:9e:0b:87:5e:b1:83:1c:b0:a8:
         47:42:54:13:f6:b5:bc:da:12:d6:e2:8d:3b:7b:a3:0c:66:72:
         fa:d1:33:2a:76:ee:66:6f:2d:e8:69:72:f6:7c:7a:57:ce:17:
         d3:55:99:91:31:3a:ac:b9:eb:d3:56:b8:9b:71:8e:0c:73:8b:
         48:aa:60:03:ab:10:8d:97:31:21:cc:36:7a:b5:b2:41:b3:72:
         0e:6f:99:46:e2:0f:05:b2:99:3d:9f:cf:6d:1e:6b:a9:74:21:
         2c:f0:36:6e:83:32:fc:a2:4c:c5:ff:13:12:b1:8c:b3:f6:61:
         92:20:02:9e:05:be:6b:70:a8:23:b3:54:f5:f1:2c:1f:85:78:
         da:2b:1e:4d:59:74:92:ca:77:e8:e8:54:73:3c:f0:cf:2f:85:
         c5:ae:e0:b8:f7:64:ed:a0:97:35:e1:e6:e1:6e:ed:2d:89:23:
         54:8b:fc:6a:f6:1e:f2:19:51:5e:16:bf:d2:72:2f:ea:e7:83:
         75:6a:27:01:7e:48:06:2b:d4:9e:2d:8c:43:99:cd:de:c4:b7:
         78:27:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:13 2026 by rpki-client