Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer (raw, json)
Hash identifier:          NX8/d2BRPL9Ma6rhfRJ8+XxJQ9Fd7VoPowg8AMJ/Dwk=
Subject key identifier:   F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       5394
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 May 2026 18:46:37 +0000
Certificate not after:    Thu 01 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 37.111.0.0/17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21396 (0x5394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: May 31 18:46:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:2f:4f:55:6e:89:6b:7c:bd:56:84:ed:16:
                    42:a8:ec:a3:78:62:0a:c6:33:da:a5:7a:8b:ff:62:
                    cb:40:32:f6:9f:8c:a5:bf:44:b0:40:71:5a:71:bf:
                    2a:e6:ad:e7:15:92:ad:20:77:38:4b:9d:d6:f9:be:
                    9c:d1:8f:67:da:27:7e:ed:94:f9:bf:76:fb:cf:70:
                    c7:45:22:66:54:07:17:25:5a:ac:b7:0a:52:80:ed:
                    9e:60:55:1b:52:d1:7b:d0:fc:00:94:ac:00:ac:49:
                    13:ee:82:dc:0e:6c:7c:6a:b1:6d:70:7c:25:5d:e8:
                    38:a5:c1:bc:a8:a2:35:61:ca:ff:e6:b2:66:cd:b9:
                    33:32:08:85:3d:e3:2b:ed:c7:50:ef:00:70:07:ee:
                    a0:3c:7f:af:0a:34:c3:55:17:b5:aa:69:6b:34:02:
                    70:59:30:6b:2e:cd:d8:3d:1a:14:24:bd:e5:38:b5:
                    da:7e:91:76:e8:81:fb:b1:26:9d:33:51:ee:7f:0c:
                    1d:9b:1c:a5:c6:71:7d:0b:da:74:a7:31:a2:0b:36:
                    a2:b0:d6:f0:9d:9c:a6:77:f1:55:bd:84:ae:c4:90:
                    94:ce:6e:bc:b0:ea:96:b5:b5:91:3a:3e:ed:11:c5:
                    27:dc:6b:08:a7:13:76:54:1f:40:c5:58:df:7b:eb:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:d2:12:db:37:c9:35:e2:e2:0f:81:6f:ee:55:a1:09:ad:
         69:0a:40:f5:a7:1a:c0:73:17:87:73:9f:82:c5:30:ec:3c:74:
         0a:35:de:3a:e4:0a:a1:27:11:f5:9c:04:be:89:3b:ab:46:d6:
         dc:06:23:f6:a0:d7:99:44:88:58:66:26:e4:ef:93:e7:a9:35:
         f7:63:cf:eb:1d:5c:79:67:61:19:4d:38:55:87:b6:d1:c7:94:
         10:7b:10:c6:f9:c1:23:21:10:c2:71:96:eb:96:bf:bd:93:2f:
         31:33:1d:3f:39:f4:6c:11:8c:e0:8c:09:9c:5e:0d:c6:61:27:
         22:b1:c5:a2:6b:bd:65:ef:50:43:a3:f2:0d:1f:e2:88:51:17:
         0e:79:32:1d:4a:4c:1a:aa:39:0f:93:c7:81:25:0f:0f:07:25:
         83:2d:91:2e:a1:8d:89:2c:80:b4:00:0c:89:49:1e:64:db:97:
         a0:66:2f:4f:30:f2:4c:df:c2:c1:3d:9a:97:00:0d:d3:ad:b6:
         40:24:3e:4d:7b:68:04:66:eb:b9:a9:cd:6a:cc:45:98:62:d5:
         60:9b:25:c2:22:58:78:23:7c:c0:6f:77:e2:e2:95:56:54:a1:
         02:fb:16:ab:6e:e6:d4:d8:3a:38:d5:97:22:dd:e0:7e:bb:4d:
         9e:b9:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:26:34 2026 by rpki-client