Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.cer (raw, json)
Hash identifier:          OGU97SsP0G5U29sp3rfJY/YMEmiuoIFyNVfNSUSKWoo=
Subject key identifier:   EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       5360
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 May 2026 13:54:02 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 87.121.117.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21344 (0x5360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: May 21 13:54:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:08:82:bd:26:bb:f2:75:fa:17:04:70:42:
                    30:bb:c5:8f:bd:0f:5f:3d:1a:25:8f:8a:a4:7a:02:
                    72:7b:2e:c5:66:89:5e:2a:18:ab:28:a6:23:12:fe:
                    37:5f:74:99:4e:3d:94:c8:1e:5d:8c:75:f1:5a:49:
                    66:40:4b:73:6d:65:63:9e:4f:72:dd:04:0c:a0:38:
                    ee:1c:de:7a:b4:c6:da:d2:62:a7:01:43:e3:7c:f3:
                    42:c1:73:bf:e8:48:f0:e2:38:5a:a6:c4:3e:dc:6c:
                    3a:ef:ee:58:ed:32:27:11:44:61:0d:ba:57:fa:45:
                    06:e0:72:01:9d:56:34:40:64:64:c4:56:4e:8d:3c:
                    4f:6f:5c:92:64:19:10:83:a6:32:a3:5a:4c:38:ab:
                    7e:00:93:53:44:85:f6:6f:a2:b5:ff:f3:7a:2b:18:
                    64:7b:92:f0:51:4e:8f:e9:43:46:dd:1d:14:94:c2:
                    8a:43:0d:d5:2d:9e:38:7f:1c:02:f2:3c:da:6d:ac:
                    49:f4:47:7e:5a:c7:f7:22:40:94:00:7b:aa:1d:cd:
                    0c:df:81:15:ed:29:99:82:aa:f1:9d:2f:9b:8a:74:
                    b2:5c:25:cc:90:24:cc:da:91:26:25:b4:94:dc:ed:
                    7d:d4:42:0e:d1:61:bb:71:61:13:43:6f:95:63:93:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:36:29:66:28:bc:db:b1:fc:03:1e:cb:c7:83:04:e9:d7:0b:
         eb:69:15:53:c3:59:58:2f:0a:a6:32:c9:c3:98:e9:66:af:5a:
         7d:97:fd:f1:9a:d5:81:7a:5a:c9:9f:bb:18:8b:02:f4:80:26:
         f7:e4:79:18:62:4e:6f:c2:47:59:84:c7:94:a7:82:09:20:c9:
         f5:40:71:ee:60:5a:11:ea:e2:db:c9:31:66:24:e9:2a:04:6b:
         d9:16:9e:ac:e1:46:ad:14:e5:c0:ef:a4:c8:d2:62:0b:6e:f7:
         d9:9e:60:ab:d9:d0:85:39:c7:88:b5:87:eb:6d:99:83:ff:6d:
         84:66:9f:e4:a3:b6:6d:e9:a4:83:c0:4d:b6:5e:de:5f:55:7c:
         c7:e1:5c:ea:57:bb:19:98:7e:5b:02:53:51:b2:0e:cc:a5:bb:
         91:1b:d0:e3:3f:f5:35:c7:e7:4d:d2:f5:54:f0:d7:23:e9:f3:
         35:7b:92:49:a1:98:7f:bc:a6:c4:da:dd:fa:1d:a7:72:39:a6:
         07:f7:04:19:e4:34:c4:3a:c8:dd:7b:aa:ca:5c:4d:f4:0d:de:
         8f:30:fa:ab:e6:25:ff:69:58:14:df:f0:bc:1e:ec:2c:2f:d6:
         9c:4d:ef:d8:51:bc:37:5e:c2:b9:e1:3b:03:12:75:12:c3:45:
         35:cf:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:24:39 2026 by rpki-client