Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
File:                     VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (raw, json)
Hash identifier:          FnygnhbW4icliWyS62ZBFxbhsookrKEZs1+PsTmtGQo=
Subject key identifier:   54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       8366
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 09 Oct 2026 12:49:53 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    IP: 69.94.32.0/20
                          IP: 69.94.80.0/20
                          IP: 209.212.192.0/19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33638 (0x8366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  9 12:49:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
                    be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
                    54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
                    2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
                    f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
                    a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
                    42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
                    bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
                    5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
                    9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
                    74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
                    f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
                    10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
                    57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
                    e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
                    63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
                    0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.94.32.0/20
                  69.94.80.0/20
                  209.212.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:7e:a4:57:88:b4:f9:f1:ac:82:a4:12:40:c9:4b:15:8e:ba:
         47:ea:1c:9b:9c:92:16:ab:ca:27:46:da:68:3c:a4:b5:8e:62:
         1c:b9:62:42:48:9d:41:e7:67:84:95:14:5c:c4:86:02:da:48:
         0b:28:ec:a7:d0:e2:80:d8:5d:b8:bd:51:70:e1:a9:a5:5f:ff:
         cc:23:ae:a3:ba:fd:90:bc:83:a3:75:03:a7:94:e0:f9:e9:3a:
         44:fb:64:70:d7:7d:76:8c:e7:b5:5e:37:c0:b0:28:f4:8d:97:
         1d:ce:59:67:2e:8a:a6:44:dc:5d:de:a1:b4:77:df:dc:59:87:
         b4:8e:b6:28:e2:03:0c:6a:c0:79:cd:36:16:92:bd:26:83:1b:
         69:d4:da:4e:5e:21:38:87:86:36:dc:3d:e7:f5:09:68:86:72:
         a8:ec:06:ce:50:2b:6b:77:1f:6f:21:39:9b:d9:f7:dd:78:e5:
         b2:93:b8:a3:f6:57:ba:e2:66:de:9e:a0:3a:0a:2a:1a:bc:65:
         f9:6d:35:fa:60:34:02:61:78:5f:d5:79:b1:99:b0:71:85:c4:
         a8:f7:93:6f:f4:47:1e:65:bd:78:71:eb:a3:61:c0:98:6e:75:
         b5:25:2e:e4:8d:b7:d9:67:03:52:7a:97:7e:49:68:c6:8c:a1:
         66:7e:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:59:30 2026 by rpki-client