Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
File:                     RnF4Q-fTSLOez3uSSVUB_jVQujw.cer (raw, json)
Hash identifier:          qXUlDeYibe8BDzJfmx0ABAxM6hZyYktnRsr+XlomQO0=
Subject key identifier:   46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       53E1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 17 Jun 2026 22:58:45 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    AS: 202348
                          IP: 91.240.89.0/24
                          IP: 185.130.49.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 06:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21473 (0x53e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jun 17 22:58:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:b9:d3:35:f0:db:72:b8:2a:35:51:11:1f:
                    12:4c:2d:33:64:f1:dd:8d:9a:f8:0e:35:f0:e2:3b:
                    dd:ae:ff:15:d6:79:be:b8:70:1d:6a:d8:80:1a:6d:
                    f7:c4:df:e5:ee:8d:5b:8d:3c:69:cd:e8:74:e4:dd:
                    75:f7:47:c2:dd:f8:89:52:9c:72:e6:13:95:15:fe:
                    8e:41:e4:92:a0:8c:42:3f:ae:25:18:92:c5:d6:ff:
                    27:14:8a:80:81:1d:f9:b7:b6:d2:e7:55:75:c1:43:
                    82:36:3a:77:72:be:db:f9:39:b0:37:dc:b0:c9:3b:
                    a5:3f:ef:b9:79:f8:54:d2:cd:8f:54:12:b7:6d:cd:
                    aa:85:05:dc:f2:a1:be:e2:21:d3:35:7d:aa:dc:75:
                    fa:fa:31:31:0b:54:b6:e1:a2:a0:19:7b:c9:29:73:
                    df:50:eb:b9:72:40:99:dd:5e:01:b7:a4:4f:3d:49:
                    f5:3c:9c:ad:f6:b8:83:6b:db:ce:9b:36:6e:8f:ee:
                    5b:28:5d:35:ce:49:b5:a3:ec:77:a2:7f:3c:8f:48:
                    d7:39:8b:a4:4c:54:b3:df:24:df:10:09:11:07:ae:
                    24:78:df:34:6c:e7:b2:d0:df:6f:5e:b3:54:69:5f:
                    11:31:d5:32:69:9d:3b:2b:45:90:72:7a:54:60:2a:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202348

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.89.0/24
                  185.130.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:98:72:4b:91:73:11:7d:13:d1:fb:f7:a2:47:56:1e:a7:
         63:63:72:30:ef:93:7b:09:8a:f5:98:e2:e1:a1:cb:ec:a3:0d:
         38:7b:31:bd:77:38:2e:04:ce:c9:1f:71:68:89:75:fe:e7:0e:
         62:e7:7b:26:35:07:4c:f7:67:20:91:dd:9b:6b:e2:4a:00:d7:
         7a:88:cc:9a:3b:b4:99:5c:5d:04:af:d3:e1:6d:e5:31:dc:2c:
         e4:d4:ba:ff:39:53:53:28:b2:e0:fb:66:31:58:88:e9:8b:60:
         f9:e4:67:b1:41:5f:6d:81:63:ad:06:2d:c9:64:32:e9:d6:db:
         2a:f1:9b:cf:b4:6e:30:e3:1e:ce:1d:d9:8e:1e:57:82:b3:ef:
         f5:17:4a:a1:a5:fc:74:a7:df:08:ca:31:71:16:10:66:77:4d:
         d8:f3:f8:af:f4:7d:8c:3a:51:bb:d5:16:93:0e:bc:72:3d:d4:
         f9:c1:1a:6b:aa:3d:60:c6:60:c9:49:14:7f:08:35:fb:ae:8d:
         98:72:22:36:f4:d1:ec:16:af:eb:b9:e2:22:d3:8a:94:b7:94:
         23:39:3d:5f:e5:01:77:97:ed:1b:b4:b1:58:7b:d1:e9:35:57:
         c7:43:f3:8e:26:0d:37:74:c3:de:21:c8:03:e0:c4:88:69:44:
         ac:62:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:39 2026 by rpki-client