Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
File:                     ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (raw, json)
Hash identifier:          lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=
Subject key identifier:   49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4B89
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Aug 2026 00:11:59 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 177.7.160.0/20
                          IP: 177.7.224.0/20
                          IP: 179.197.112.0 -- 179.197.143.255
                          IP: 179.199.160.0/20
                          IP: 179.252.0.0/20
                          IP: 179.252.160.0/20
                          IP: 179.254.224.0/20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19337 (0x4b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Aug 28 00:11:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9199197, serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:cc:1c:68:7d:6b:1c:9a:c7:51:80:ad:c4:
                    37:94:21:c9:65:91:ed:1e:e2:83:79:d7:f3:00:da:
                    8b:33:6a:ce:bf:85:ab:02:7d:5f:24:1c:02:6c:1b:
                    8c:5e:37:28:80:3e:1b:17:d4:e4:0f:08:06:5a:e2:
                    f8:ad:08:38:c4:1b:ad:ae:12:9a:d0:1a:54:fd:d7:
                    e8:85:a5:da:5d:23:60:bd:ba:47:f9:49:5a:b1:17:
                    3c:53:1d:ed:cd:b7:e7:0c:28:46:35:55:57:9c:4f:
                    fc:09:61:60:e3:8a:b6:75:76:12:a6:29:f5:9f:9f:
                    7e:78:c7:5e:6a:a3:2e:82:9d:4e:54:b2:ac:1d:64:
                    bd:cc:18:93:c8:41:20:64:82:e3:c4:e4:45:a9:50:
                    57:9c:f4:f6:f1:b7:da:a0:1b:f4:29:94:1d:4d:08:
                    a2:e0:86:0c:6a:46:46:16:6f:59:1a:47:ad:e7:81:
                    4c:35:e8:c9:66:32:d6:00:69:80:fa:ae:48:30:fe:
                    a9:8f:65:2c:cc:95:1d:2b:68:7b:2a:a7:1b:89:1d:
                    c4:28:3b:ad:4f:bb:86:ee:a7:35:c6:21:3e:cd:19:
                    7f:0a:cc:1d:5f:fd:ec:9c:7b:dc:a4:5c:43:d1:f8:
                    4a:9c:71:27:3f:d3:9b:bc:7c:e3:b9:8a:38:7b:76:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.7.160.0/20
                  177.7.224.0/20
                  179.197.112.0-179.197.143.255
                  179.199.160.0/20
                  179.252.0.0/20
                  179.252.160.0/20
                  179.254.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:65:9d:39:2c:7e:96:d4:3b:37:53:be:b5:46:2c:b6:5b:
         bd:d6:85:2a:fb:e3:ac:d1:fc:56:6c:c5:43:c8:f0:18:44:ea:
         f8:f7:08:74:0b:71:cb:93:1d:d4:57:76:5c:dc:cc:96:38:a5:
         27:46:3b:90:d1:87:b9:5c:5f:1a:f2:07:4f:ee:6c:bc:2a:46:
         f2:d5:3c:d1:bd:8c:39:80:b2:1a:69:c6:74:d4:1f:3e:32:11:
         77:47:cf:e9:93:74:5c:37:00:3b:ab:6d:2c:47:48:e9:57:7c:
         f0:21:c8:90:f6:b4:8d:ad:29:f5:1d:d5:2e:fc:85:19:2a:57:
         4d:94:c0:5f:f9:73:5f:b6:ec:3c:ba:76:bf:ca:86:1e:a4:d5:
         40:62:e7:99:41:03:56:b0:af:cf:78:3f:5e:2d:f0:02:f4:8d:
         4c:e6:5e:fa:91:22:c3:2e:b9:8d:dd:2b:f0:c2:bb:45:50:ca:
         22:ee:8d:7a:0e:7f:ac:22:4a:64:71:0f:3f:6c:d2:c6:f5:ef:
         01:f8:5d:2b:41:2a:5b:59:80:c7:63:bd:5b:f9:9f:76:31:49:
         a2:9c:6d:2f:27:2f:0c:7f:a3:1a:b8:47:bd:57:f1:a4:7a:79:
         d4:0c:7e:db:8c:de:22:c3:19:87:98:40:ec:82:a1:ef:89:ba:
         d3:f9:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:47 2026 by rpki-client